From e19e33d0a80fe1b4520fe9dab05f6f8a96d6c574 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 31 May 2023 10:01:38 +0200
Subject: introduce fw-addr-lists

---
 global-config.rsc | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

(limited to 'global-config.rsc')

diff --git a/global-config.rsc b/global-config.rsc
index b17d25c..901c7b3 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -80,6 +80,21 @@
 :global BackupUploadUser "mikrotik";
 :global BackupUploadPass "v3ry-s3cr3t";
 
+# This defines the settings for firewall address-lists (fw-addr-lists).
+:global FwAddrLists {
+#  "allow"={
+#    { url="https://eworm.de/ros/fw-addr-lists/allow";
+#      cert="R3" };
+#  };
+  "block"={
+#    { url="https://eworm.de/ros/fw-addr-lists/block";
+#      cert="R3" };
+    { url="https://www.dshield.org/block.txt"; cidr="/24";
+      cert="R3" };
+  };
+};
+:global FwAddrListTimeOut 1d;
+
 # This defines what log messages to filter or include by topic or message
 # text. Regular expressions are supported. Do *NOT* set an empty string,
 # that will filter or include everything!
-- 
cgit v1.2.3-54-g00ecf