blocklist-ipsets icon indicating copy to clipboard operation
blocklist-ipsets copied to clipboard

Changes to Spamhaus DROP and EDROP

Open tbussmann opened this issue 10 months ago • 2 comments

The Spamhaus EDROP list has been integrated into their DROP list sind 2024-04-10 (See Announcement). The FireHOL spamhaus_edrop list (which is included in firehole_level1!) is stale since then.

Further, they changed their form of distribution for the DROP list from TXT to JSON. While the old TXT formatted list is still available, they recommend to switch to the JSON version and convert it like:

tail -1 drop_v4.json | jq -r '"; Spamhaus DROP List \(.timestamp | strftime("%Y/%m/%d")) - \(.copyright)\n; https://www.spamhaus.org/drop/drop_v4.json\n; Last-Modified: \(.timestamp | strftime("%a, %d %b %Y %H:%M:%S UTC"))\n; Expires: \(.timestamp+93600 | strftime("%a, %^C%b %Y %H:%M:%S UTC"))"' > drop.txt 
jq -r 'select(.type == null) | (.cidr) + " ; " + (.sblid)' drop_v4.json >> drop.txt 
echo "; EOF" >> drop.txt

Lastly, they started to offer a IPv6 DROP list which may be of interest for FireHOL when supporting the IPv6 requests #105 and #220.

tbussmann avatar Feb 17 '25 08:02 tbussmann

Yes indeed.. Edrop is now part of the normal DROP list.

If you now go to the edrop source: https://www.spamhaus.org/drop/edrop.txt

I strongly believe this repo should also stop providing edrop now. In fact, how can you even have a list in edrop if the source is now emptied?

melroy89 avatar Mar 30 '25 21:03 melroy89

EDROP was removed in https://github.com/firehol/firehol/pull/514

adworacz avatar Nov 06 '25 21:11 adworacz