Uncategorized
Bro Intel Domain Feeds to RPZ
Say you keep loads of domain indicators in file lists for Bro to consume. If some user hits a bad domain, bro alerts. But you want to auto block the domain. That’s where RPZ could come into play. The domains are all in INDICATOR_DOM flat files like: cat ALINAPOS_DOM adobeflasherup1.com Read more…