From: Adolf Belka <adolf.belka@ipfire.org>
To: development@lists.ipfire.org
Cc: Adolf Belka <adolf.belka@ipfire.org>
Subject: [PATCH] ruleset-sources: Remove the abuse.ch SSL list from the suricata sources
Date: Mon, 21 Jul 2025 16:34:52 +0200 [thread overview]
Message-ID: <20250721143452.3384666-1-adolf.belka@ipfire.org> (raw)
- The abuse.ch ssl suricata list has stopped being updated since 2025-06-25
- Looking at all of the abuse.ch lists, none of them are being updated anymore so abuse.ch
becoming part of spamhaus looks to have stopped all work on free versions of the lists
- This change modifies the abuse.ch entry so that it no longer can be installed but also
if already installed it will remove it.
- The patch has also made a few minor typo corrections in comments.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/suricata/ruleset-sources | 9 +++------
1 file changed, 3 insertions(+), 6 deletions(-)
diff --git a/config/suricata/ruleset-sources b/config/suricata/ruleset-sources
index 4e9ea5fa9..b843d3e49 100644
--- a/config/suricata/ruleset-sources
+++ b/config/suricata/ruleset-sources
@@ -27,7 +27,7 @@ our %Providers = (
dl_type => "archive",
},
- # Ruleset for registered sourcefire users with a valid subsription.
+ # Ruleset for registered sourcefire users with a valid subscription.
subscripted => {
summary => "Talos VRT rules with subscription",
website => "https://www.snort.org",
@@ -47,7 +47,7 @@ our %Providers = (
dl_type => "archive",
},
- # Emerging threads community rules.
+ # Emerging threats community rules.
emerging => {
summary => "Emergingthreats.net Community Rules",
website => "https://emergingthreats.net/",
@@ -57,7 +57,7 @@ our %Providers = (
dl_type => "archive",
},
- # Emerging threads Pro rules.
+ # Emerging threats Pro rules.
emerging_pro => {
summary => "Emergingthreats.net Pro Rules",
website => "https://emergingthreats.net/",
@@ -72,9 +72,6 @@ our %Providers = (
summary => "Abuse.ch SSLBL Blacklist Rules",
website => "https://sslbl.abuse.ch/",
tr_string => "sslbl blacklist rules",
- requires_subscription => "False",
- dl_url => "https://sslbl.abuse.ch/blacklist/sslblacklist.rules",
- dl_type => "plain",
},
# Etnetera Aggressive Blacklist.
--
2.50.1
reply other threads:[~2025-07-21 14:34 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20250721143452.3384666-1-adolf.belka@ipfire.org \
--to=adolf.belka@ipfire.org \
--cc=development@lists.ipfire.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox