[PATCH 1/2] ipblocklist-sources: Update to include the 3CORESec ip blocklists

[Adolf Belka <adolf.belka@ipfire.org>]

[-- Attachment #1: Type: text/plain, Size: 2178 bytes --]

- The patch for this was created by Stefan Schantl
- Blocklist addition was discussed and agreed at IPFire dev conf call in June 2024.
- Tested on vm system.
- The combined list was removed because it is just the three others which can be selected
   in the WUI to give the equivalent result.

Created-by: Stefan Schantl <stefan.schantl(a)ipfire.org>
Tested-by: Adolf Belka <adolf.belka(a)ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
---
 config/ipblocklist/sources | 20 +++++++++++++++++++-
 1 file changed, 19 insertions(+), 1 deletion(-)

diff --git a/config/ipblocklist/sources b/config/ipblocklist/sources
index 0835c0f9c..69f964dd9 100644
--- a/config/ipblocklist/sources
+++ b/config/ipblocklist/sources
@@ -124,5 +124,23 @@ our %sources = ( 'EMERGING_FWRULE' => { 'name'     => 'Emerging Threats Blocklis
                                     'info'     => 'https://www.blocklist.de',
                                     'parser'   => 'ip-or-net-list',
                                     'rate'     => '30m',
-                                    'category' => 'attacker' }
+                                    'category' => 'attacker' },
+             '3CORESEC_SSH'    => { 'name'     => '3CORESec SSH Activity Blocklist',
+					 'url'      => 'https://blacklist.3coresec.net/lists/ssh.txt',
+					 'info'     => 'https://blacklist.3coresec.net',
+					 'parser'   => 'ip-or-net-list',
+					 'rate'     => '1d',
+					 'category' => 'attacker' },
+             '3CORESEC_SCAN'   => { 'name'     => '3CORESec Scan and IDS Blocklist',
+					 'url'      => 'https://blacklist.3coresec.net/lists/misc.txt',
+					 'info'     => 'https://blacklist.3coresec.net',
+					 'parser'   => 'ip-or-net-list',
+					 'rate'     => '1d',
+					 'category' => 'reputation' },
+	      '3CORESEC_WEB'    => { 'name'     => '3CORESec Web Server Activity Blocklist',
+					 'url'      => 'https://blacklist.3coresec.net/lists/http.txt',
+					 'info'     => 'https://blacklist.3coresec.net',
+					 'parser'   => 'ip-or-net-list',
+					 'rate'     => '1d',
+					 'category' => 'attacker' }
            );
-- 
2.45.2