Talos block lists failing

Looks like Talos have changed their block lists, so you can’t use them like before. Explains why various pfsense boxes and a Sophos XG v21 unit are not downloading the lists.

Snort Blog: Changes to the Snort Sample IP Block List

Yep, had to remove it from my list.

1 Like

Completely missed the announcement, so removed myself too.

Been looking at GreyNoise.

Got VPN services exposed, WG, OpenVPN and IPSec on pfsense. SSL, IPSec and Plex on the XG Home instance

I deleted their link and went past their terms of service and copied their blocklist into a IPv4 Custom_List. I figured it wouldn’t hurt. I can update it again later if I feel like it.

Really the only way around this is to create a python script to navigate to the site, accept the terms, follow the redirect, and scrape the list.

Then setup a site with nginx so pfblockerng can down load the list.