mirror.MikroTik/eworm.routeros-scripts
1
0
Fork 0
mirror of https://git.eworm.de/cgit/routeros-scripts synced 2025-08-08 12:15:19 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

fw-addr-lists: prepare lists from spamhaus.org in config

Browse source
This commit is contained in:
Christian Hesse 2023-06-09 16:03:45 +02:00
parent 3c61cf57c4
commit 458fe7c088
2 changed files with 6 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
doc/fw-addr-lists.md
View file

@ -13,7 +13,8 @@ This script downloads, imports and updates firewall address-lists. Its main
purpose is to block attacking ip addresses, spam hosts, command-and-control purpose is to block attacking ip addresses, spam hosts, command-and-control
servers and similar malicious entities. The default configuration contains servers and similar malicious entities. The default configuration contains
lists from [abuse.ch](https://abuse.ch/) and lists from [abuse.ch](https://abuse.ch/) and
[dshield.org](https://dshield.org/). [dshield.org](https://dshield.org/), and
lists from [spamhaus.org](https://spamhaus.org/) are prepared.
The address-lists are updated in place, so after initial import you will not The address-lists are updated in place, so after initial import you will not
see situation when the lists are not populated. see situation when the lists are not populated.

4
global-config.rsc
View file

@ -95,6 +95,10 @@
cert="GlobalSign Atlas R3 DV TLS CA 2022 Q3" }; cert="GlobalSign Atlas R3 DV TLS CA 2022 Q3" };
{ url="https://www.dshield.org/block.txt"; cidr="/24"; { url="https://www.dshield.org/block.txt"; cidr="/24";
cert="R3" }; cert="R3" };
# { url="https://www.spamhaus.org/drop/drop.txt";
# cert="Cloudflare Inc ECC CA-3" };
# { url="https://www.spamhaus.org/drop/edrop.txt";
# cert="Cloudflare Inc ECC CA-3" };
}; };
}; };
:global FwAddrListTimeOut 1d; :global FwAddrListTimeOut 1d;