aboutsummaryrefslogtreecommitdiffstats
path: root/global-config.rsc
diff options
context:
space:
mode:
authorGravatar Christian Hesse <mail@eworm.de>2024-06-20 11:10:16 +0200
committerGravatar Christian Hesse <mail@eworm.de>2024-06-21 15:57:04 +0200
commitb35c7b6703c4d89127eebe85f55a8c694137985d (patch)
tree50a8b9e5c2f27d3a3291f459a17d4d5d515dc0a9 /global-config.rsc
parent35f4ec0b1d1d8c26ec9293efe2d9091993d7bf89 (diff)
parent1a6812ef797a1683cec9678062cfaca367500ad0 (diff)
Merge branch 'root-certificates' into next
Diffstat (limited to 'global-config.rsc')
-rw-r--r--global-config.rsc18
1 files changed, 9 insertions, 9 deletions
diff --git a/global-config.rsc b/global-config.rsc
index a0835f8..cdc1d5c 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -92,27 +92,27 @@
:global FwAddrLists {
# "allow"={
# { url="https://git.eworm.de/cgit/routeros-scripts/plain/fw-addr-lists.d/allow";
-# cert="E5"; timeout=1w };
+# cert="ISRG Root X2"; timeout=1w };
# };
"block"={
# { url="https://git.eworm.de/cgit/routeros-scripts/plain/fw-addr-lists.d/block";
-# cert="E5" };
+# cert="ISRG Root X2" };
{ url="https://feodotracker.abuse.ch/downloads/ipblocklist_recommended.txt";
- cert="GlobalSign Atlas R3 DV TLS CA 2022 Q3" };
+ cert="GlobalSign" };
{ url="https://sslbl.abuse.ch/blacklist/sslipblacklist.txt";
- cert="GlobalSign Atlas R3 DV TLS CA 2022 Q3" };
+ cert="GlobalSign" };
{ url="https://www.dshield.org/block.txt"; cidr="/24";
- cert="R3" };
+ cert="ISRG Root X1" };
{ url="https://lists.blocklist.de/lists/strongips.txt";
- cert="Certum Domain Validation CA SHA2" };
+ cert="Certum Trusted Network CA" };
# { url="https://www.spamhaus.org/drop/drop.txt";
-# cert="Cloudflare Inc ECC CA-3" };
+# cert="Baltimore CyberTrust Root" };
# { url="https://www.spamhaus.org/drop/edrop.txt";
-# cert="Cloudflare Inc ECC CA-3" };
+# cert="Baltimore CyberTrust Root" };
};
# "mikrotik"={
# { url="https://git.eworm.de/cgit/routeros-scripts/plain/fw-addr-lists.d/mikrotik";
-# cert="E5"; timeout=1w };
+# cert="ISRG Root X2"; timeout=1w };
# };
};
:global FwAddrListTimeOut 1d;