Skip to content
This repository has been archived by the owner on Jul 2, 2024. It is now read-only.

Blacklist suggestion #3

Open
ethack opened this issue Nov 15, 2017 · 1 comment
Open

Blacklist suggestion #3

ethack opened this issue Nov 15, 2017 · 1 comment

Comments

@ethack
Copy link
Contributor

ethack commented Nov 15, 2017

According to this the FireHOL list has a low false positive rate.

@ethack
Copy link
Contributor Author

ethack commented Aug 6, 2020

Found the source list here:
https://iplists.firehol.org/

Direct link here (this is what we should use):
https://iplists.firehol.org/files/firehol_level1.netset

And individual lists that make up this one are here:
https://github.com/firehol/blocklist-ipsets

The only problem keeping me from implementing this now is that it contains CIDR ranges. We can't even just expand the ranges to individual IPs either since some of the ranges are for non-routable or reserved IPs like 0.0.0.0/8 or 224.0.0.0/3.

  • One option would be to just ignore any entry that contains more than x IPs in a range and expand the rest.
  • Another option would be to add logic to store ranges and check if an individual IP is contained.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

3 participants