Downloading the Snort block list is no longer possible because of the terms page

[Abdulhadi-Mraish]

Downloading the Snort block list is no longer possible because of the terms page

The IP blocklist file downloaded with PulledPork will contain HTML content

https://snort.org/downloads/ip-block-list

https://blog.snort.org/2024/09/changes-to-snort-sample-ip-block-list.html

[amishmm]

As mentioned in blog post, this list is anyway not supposed to be used and is for testing only. It gives false sense of protection.

So this should be disabled in pulledpork, anyway.

So in pulledpork configuration, set: snort_blocklist = false

[ROBERT-MCDOWELL]

thanks to open an issue for that, I received no email warning from snort since... is there an official ip block list we can trust on?

[amishmm]

Test emerging threats blocklist, by setting:

et_blocklist = true

in pulledpork config file.

[ROBERT-MCDOWELL]

ok thanks

[finchy]

I hate that this was done. #justsaying