Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Downloading the Snort block list is no longer possible because of the terms page #59

Open
Abdulhadi-Mraish opened this issue Feb 18, 2025 · 2 comments

Comments

@Abdulhadi-Mraish
Copy link

Downloading the Snort block list is no longer possible because of the terms page

The IP blocklist file downloaded with PulledPork will contain HTML content

https://snort.org/downloads/ip-block-list

https://blog.snort.org/2024/09/changes-to-snort-sample-ip-block-list.html

@amishmm
Copy link

amishmm commented Feb 18, 2025

As mentioned in blog post, this list is anyway not supposed to be used and is for testing only. It gives false sense of protection.

So this should be disabled in pulledpork, anyway.

So in pulledpork configuration, set:
snort_blocklist = false

@ROBERT-MCDOWELL
Copy link

ROBERT-MCDOWELL commented Feb 18, 2025

thanks to open an issue for that, I received no email warning from snort since...
is there an official ip block list we can trust on?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants