Snort mailing list archives
Pulledpork and multiple reputation IP blacklists
From: Stanford Prescott <stan.prescott () gmail com>
Date: Fri, 10 Mar 2017 09:28:04 -0600
I am a novice snort user and first time poster to the mailing list. I hope I am posting this in the right place. I have done multiple searches about my question but haven't really found any useful answers. I see that pulledpork handles reputation preprocessor blacklists management of the Talos Intelligence lists. However, I also see that snort can handle multiple blacklists by placing the paths to each blacklist in the reputation preprocessor configuration in snort.conf. Is there a way to get pulledpork to recognize those additional blacklists that are configured in snort.conf? I will admit I haven't actually tested pulledpork yet to see if it does handle multiple blacklists, but in pulledpork.conf it only asks for the location of the blacklists downloaded from Talos Intelligence. TIA Stan ------------------------------------------------------------------------------ Announcing the Oxford Dictionaries API! The API offers world-renowned dictionary content that is easy and intuitive to access. Sign up for an account today to start using our lexical data to power your apps and projects. Get started today and enter our developer competition. http://sdm.link/oxford _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Pulledpork and multiple reputation IP blacklists Stanford Prescott (Mar 10)
