About chirss

I have a different sort of thought and could use some help figuring out if mm can do this. Essentially I would like to feed in a list of ip addresses and then if there is a match against any blacklist to throw it to an output. The idea here is to list out all of the ip addresses I would want to know showed up in a blacklist/rbl in order to figure out why ip addresses I manage are getting listed and to know which blacklists are doing it.   I don't have this problem right now, this is just more a thought I had on something else mm could do potentially. ... View more

 Hi,   I'm considering how to do some of the following, if anyone has advice or links to documentation I'm not finding I would appreciate it:   Export the configuration in a way that any local custom miners are also backed up, meaning the restore is a literal one liner command or something along those lines. The export backup is a manual click and won't work for something automated. Integration with active directory, ldap, or something else for authentication based on group membership to the web ui. High availability. Other than auto focus I can't seem to find a way to handle this. If a mm instance is down other than some sort of vip/round robin dns solution, or something else does anyone have a suggestion here? Thanks! ... View more

This one is fairly straight forward. Based on an ipv4 miner:   attributes: confidence: 50 direction: inbound share_level: green type: IPv4 ignore_regex: ^# source_name: firehol.blocklist_net_ua url: https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/blocklist_net_ua.ipset user_agent: MineMeld   There are a ton of lists just under his blocklist ipsets:   https://github.com/firehol/blocklist-ipsets   I'm not sure if this is the right way to go about processing the data long term, but in the short term it looks handy. ... View more

There's ebl, edl, persistentdag, nonpersistentdag, etc. Limits on the number of feeds.   Does anyone have a concise summary of some kind which makes picking which one of these, or combination of these, is the best route to go for integrating with panos? ... View more