Hello all, We use MineMeld with our PA firewalls at work, so I thought I'd try it at home as well, and it was easy to integrate with my OpenBSD PF firewall. Lots of high-quality IPv4 address and subnets to block! However, I also run IPv6 at home and would like to import a decent feed. I already use unbound to blackhole everything in the SomeoneWhoCares list (ads and tracking), which also works for IPv6, but I'd like to use a v6 list for malware, c&c, botnets, known bruteforce nets, etc. I've been looking, but come up empty handed. TAXII has the ipv6 tag, but doesn't appear to actually have any content in v6. Does anyone here know of a decent source I can bring into minemeld? Thanks! -Brian Marshall
I think that's true for IPv4 feeds as well, that's why frequency of updates and a proper expiration policy are so important to an effective Threat Intelligence enforcement strategy.
I will check around and let you know if I can find a good IPv6 feed.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!