profiles_ipi_feeds.conf

# Christopher MJ Gray  | Product Management Engineer - SP | NA   | F5 Networks |    | cgray@f5.com     | https://github.com/c2theg/F5_DDoS_BP
# Updated: 4/3/2021
# Version: 1.0.7
# tmsh show running-config security ip-intelligence
#---------------------------------------------------------------------------------------------------------------------------------------------
security ip-intelligence feed-list DDoS_Feeds {
    description "DDoS related address lists"
    feeds {
        blacklist_bogon_v4 {
            default-blacklist-category DDoS_Blacklisted
            poll {
                interval 432630
                url https://raw.githubusercontent.com/c2theg/DDoS_lists/master/fullbogons-ipv4.txt
            }
        }
        blacklist_bogon_v6 {
            default-blacklist-category DDoS_Blacklisted
            poll {
                interval 432200
                url https://raw.githubusercontent.com/c2theg/DDoS_lists/master/fullbogons-ipv6.txt
            }
        }
        blacklist_Tor_Exit_Nodes {
            default-blacklist-category DDoS_Blacklisted
            poll {
                interval 86300
                url https://raw.githubusercontent.com/c2theg/DDoS_lists/master/Tor_exit_nodes.txt
            }
        }
        blacklist_generic_ips {
            default-blacklist-category DDoS_Blacklisted
            poll {
                interval 86400
                url https://raw.githubusercontent.com/c2theg/DDoS_lists/master/blacklist_generic_ips.txt
            }
        }
        whitelist_dns_servers {
            default-blacklist-category DDoS_Whitelisted
            default-list-type whitelist
            poll {
                interval 432000
                url https://raw.githubusercontent.com/c2theg/DDoS_lists/master/whitelist_dns_servers.txt
            }
        }
        whitelist_ntp_servers {
            default-blacklist-category DDoS_Whitelisted
            default-list-type whitelist
            poll {
                interval 432010
                url https://raw.githubusercontent.com/c2theg/DDoS_lists/master/whitelist_ntp_servers.txt
            }
        }
        whitelist_update_domains {
            default-blacklist-category DDoS_Whitelisted
            default-list-type whitelist
            poll {
                interval 86400
                url https://raw.githubusercontent.com/c2theg/DDoS_lists/master/whitelist_update_domains.txt
            }
        }
    }
}