topic Use spamhaus.org DROP list on an ASA in Network Security

Use spamhaus.org DROP list on an ASA

patoberli — Fri, 21 Feb 2020 14:36:32 GMT

Hi All

We have an ASA with a current software, without IPS functionality in use. We manage it through CSM.

Is there a way to implement the free spamhaus.org DROP list as a drop list in the ASA, which would get updated automatically?

Thanks

Re: Use spamhaus.org DROP list on an ASA

Flavio Miranda — Wed, 01 Nov 2017 02:12:49 GMT

Hi,

I dont know too much about free spamhaus.org. Is it possible to get this free list somehow? If does, would be possible to run the list via ASA API. A script could validate any update on the list and them implement on ASA.

-If I helped you somehow, please, rate it as useful.-

Re: Use spamhaus.org DROP list on an ASA - Update

Flavio Miranda — Wed, 01 Nov 2017 02:17:39 GMT

You may would like to see this:

https://github.com/pierky/blocklistsaggregator

"A Python tool that downloads IP block lists from various sources and builds configurations for network equipments and firewalls."

Including Spamhaus.

-If I helped you somehow, please, rate it as useful.-

Re: Use spamhaus.org DROP list on an ASA - Update

patoberli — Thu, 02 Nov 2017 08:30:58 GMT

Thanks for the link. I'll have a look at it.