EDL dynamic list is URL access error

[Joshan_Lakhani]

i  have created the new EDL  with this  URL  (http://panwdbl.appspot.com/lists/mdl.txtbut unable to fetch We have changed the service route with outside interface but the same issue was happening.

[VincentPresogna]

Try using https://panwdbl.appspot.com/lists/mdl.txt

[Joshan_Lakhani]

Dear I have try both URL Using HTTP as well as HTTPS  but issue still same.

[BPry · Accepted solution]

@Joshan_Lakhani,

Look through your traffic logs and ensure that you are actually allowing the traffic to pass. The error message you are being presented means that something is blocking the firewall from accessing that URL, if it simply couldn't process the list you would be getting a completely different error message. 

[JoeVan]

This post pertains to version 9.1.4. I will post an update after upgrading.

It appears the the firewall is using TLS 1.2 when 1.3 is required by the Web server. (https://check.torproject.org/cgi-bin/TorBulkExitList.py).  

This is a firewall attempting to lookup Tor exit nodes.  The web server issues an "Encrypted Alert" with TLS 1.2

This is a workstation using TLS 1.3 and receiving the expected list of Tor exit nodes.

[willie.lasticly]

Did you resolve your issue with connecting to https://panwdbl.appspot.com/lists/ettor.txt? 

I’m also receiving a ‘URL access error.’ The system log displays a ‘ tls-edl-auth-failure’ while attempting to connect.

[BPry]

@willie.lasticly,

The panwdbl.appspot.com domain isn't active anymore. Luigi moved these to be hosted directly on GitHub instead, so you're going to have to modify your entries.

The new Tor Exit Nodes list can be found HERE and that link can simply replace what you already have configured without issue. The new GitHub page can be found at the following link.

https://github.com/jtschichold/panwdbl-actions

[willie.lasticly]

Thanks!  It works!