Re: Adding additional alert blacklists
Emanuele Faranda <[email protected]>
| Newsgroups | gmane.linux.ntop.general |
|---|---|
| Message-ID | <[email protected]> |
Hi Ryan, That's the right place to put your own blacklist. Please verify the following: - the blacklist should be a valid URL and not a local file path - the variable blacklistURLs must be updated with the blacklist url (be sure to add a comma after the default url string) - the url should work properly (try with "wget http://your_url_here") - each line of the blacklist file should contain a single ip address. Empty lines or lines starting with # are ignored - you should restart ntopng after setting the blacklistURLs variable Regards, Emanuele On Thu, Aug 17, 2017 at 11:38 PM, Ryan Gelobter <[email protected]> wrote: > I was wondering if its possible to add additional txt based lists of > IP addresses for ntopng to alert on besides the emerging threats list. > > I tried adding another URL into the below file but it didn't seem to > work? I just wanted to confirm if that was supported because it looks > like it should but I didn't see any documentation about it. > > /usr/share/ntopng/scripts/lua/modules/blacklist_utils.lua _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop