I’ve spent some time testing the community lists of the NS8 threat shield. From the tests I’ve done, I can say that: The business lists do a good job, especially the nethesis L3 which is quite full (almost 27000 IPs) and the yoroi L2 (about 9400). However, the FireHOL L1 list, despite being small…

[image] izuky: However, the FireHOL L1 list, despite being smaller, proved to be very effective in blocking a significant number of malicious requests across the three firewalls I tested it on." I agree, but sometimes it blocks some safe sites. Notably aruba SMTP servers. [image] izuky: …

Thank you for this very helpful post. I wish to add two points: If you register for the AbuseIPDB list with the webmaster role (also free) then you have double (10) free downloads per day via the API. The formatting of the /etc/banip/banip.custom.feeds entry that worked for me: “abuseipdp”: { …

NethServer Community

NethSecurity 8 - Threat Shield Community Lists

NethSecurity

ns8

show post in topic

Home
Categories
Guidelines
Terms of Service
Privacy Policy

Powered by Discourse, best viewed with JavaScript enabled