From mboxrd@z Thu Jan 1 00:00:00 1970 From: Adolf Belka To: development@lists.ipfire.org Subject: [PATCH 1/3] sources: Removal of ALIENVAULT and SPAMHAUS_EDROP from ipblocklist sources Date: Fri, 19 Apr 2024 15:39:39 +0200 Message-ID: <20240419133941.3503396-1-adolf.belka@ipfire.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============2235190170204229614==" List-Id: --===============2235190170204229614== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable - ALIENVAULT has not been updated since at least Nov 2022 but probably earlie= r. There is no date for the file to be downloaded but a forum user has log messages from = Nov 2022 that indicate the file had not changed as therefore no download occurred. - AT&T aquired AlienVault in August 2018. Somewhere between 2018 and 2022 the= list stopped getting updated. AlienVault references on the AT&T website are now for a d= ifferent product. - Discussed in IPFire conf call of April 2024 and agreed to remove the ALIENV= AULT blocklist. - On Apr 10th the Spamhaus eDROP list was merged with the Spamhaus DROP list.= The eDROP list is still available but is now empty. Trying to select the SPAMHAUS_ED= ROP list gives an error message that the blocklist was found to be empty. - This patch removes both the ALIENVAULT and the SPAMHAUS_EDROP lists from th= e ipblocklist sources file. Tested-by: Adolf Belka Signed-off-by: Adolf Belka --- config/ipblocklist/sources | 12 ------------ 1 file changed, 12 deletions(-) diff --git a/config/ipblocklist/sources b/config/ipblocklist/sources index be0cf0229..0835c0f9c 100644 --- a/config/ipblocklist/sources +++ b/config/ipblocklist/sources @@ -55,12 +55,6 @@ our %sources =3D ( 'EMERGING_FWRULE' =3D> { 'name' =3D= > 'Emerging Threats Blocklis 'parser' =3D> 'ip-or-net-list', 'rate' =3D> '12h', 'category' =3D> 'reputation' }, - 'SPAMHAUS_EDROP' =3D> { 'name' =3D> "Spamhaus Extended Don= 't Route or Peer List", - 'url' =3D> 'https://www.spamhaus.or= g/drop/edrop.txt', - 'info' =3D> 'https://www.spamhaus.or= g/drop/', - 'parser' =3D> 'ip-or-net-list', - 'rate' =3D> '1h', - 'category' =3D> 'reputation' }, 'DSHIELD' =3D> { 'name' =3D> 'Dshield.org Recommend= ed Block List', 'url' =3D> 'https://www.dshield.org= /block.txt', 'info' =3D> 'https://dshield.org/', @@ -106,12 +100,6 @@ our %sources =3D ( 'EMERGING_FWRULE' =3D> { 'name' = =3D> 'Emerging Threats Blocklis 'parser' =3D> 'ip-or-net-list',, 'rate' =3D> '1h', 'category' =3D> 'application' }, - 'ALIENVAULT' =3D> { 'name' =3D> 'AlienVault IP Reputat= ion database', - 'url' =3D> 'https://reputation.alie= nvault.com/reputation.generic', - 'info' =3D> 'https://www.alienvault.= com/resource-center/videos/what-is-ip-domain-reputation', - 'parser' =3D> 'ip-or-net-list', - 'rate' =3D> '1h', - 'category' =3D> 'reputation' }, 'BOGON' =3D> { 'name' =3D> 'Bogus address list (M= artian)', 'url' =3D> 'https://www.team-cymru.= org/Services/Bogons/bogon-bn-agg.txt', 'info' =3D> 'https://www.team-cymru.= com/bogon-reference', --=20 2.44.0 --===============2235190170204229614==--