Snort mailing list archives

Pulledpork and multiple reputation IP blacklists


From: Stanford Prescott <stan.prescott () gmail com>
Date: Fri, 10 Mar 2017 09:28:04 -0600

I am a novice snort user and first time poster to the mailing list. I hope
I am posting this in the right place. I have done multiple searches about
my question but haven't really found any useful answers.

I see that pulledpork handles reputation preprocessor blacklists management
of the Talos Intelligence lists. However, I also see that snort can handle
multiple blacklists by placing the paths to each blacklist in the
reputation preprocessor configuration in snort.conf.

Is there a way to get pulledpork to recognize those additional blacklists
that are configured in snort.conf? I will admit I haven't actually tested
pulledpork yet to see if it does handle multiple blacklists, but in
pulledpork.conf it only asks for the location of the blacklists downloaded
from Talos Intelligence.

TIA

Stan
------------------------------------------------------------------------------
Announcing the Oxford Dictionaries API! The API offers world-renowned
dictionary content that is easy and intuitive to access. Sign up for an
account today to start using our lexical data to power your apps and
projects. Get started today and enter our developer competition.
http://sdm.link/oxford
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!


Current thread: