Subgate USOM Feed - Zararli Baglanti Listesi

Kurulum Rehberi

Yaygin firewall/DNS urunlerinde bu feed'i nasil kullanacaginizi anlatiyoruz.

Fortigate External Threat Feed

FortiOS 6.2+ ile External Block List (Threat Feed) olusturup domain.txt ve ipv4.txt dosyalarini besleyebilirsiniz.

Web arayuz → Security Fabric → External Connectors → Create New → Threat Feeds
Domain Name icin URL: https://usom.subgatenetwork.com/domain.txt
Refresh rate: 10 dakika (60 sn min)
Ayni sekilde IP Address feed'i icin ipv4.txt ekleyin
Firewall Policy'de bu feed'leri Web Filter/DNS Filter altinda kullanin

CLI ile:

config system external-resource
  edit "subgate-usom-domain"
    set type domain
    set resource "https://usom.subgatenetwork.com/domain.txt"
    set refresh-rate 10
  next
  edit "subgate-usom-ip"
    set type address
    set resource "https://usom.subgatenetwork.com/ipv4.txt"
    set refresh-rate 10
  next
end

pfSense pfBlockerNG

pfBlockerNG-devel paketi ile DNSBL ve IP Feed olusturabilirsiniz.

Firewall → pfBlockerNG → DNSBL → DNSBL Groups → Add
DNSBL Source URL: https://usom.subgatenetwork.com/domain.txt
Format: URL, List Action: Unbound
IP feed icin: Firewall → pfBlockerNG → IPv4 → Add, URL: https://usom.subgatenetwork.com/ipv4.txt
Update Frequency: 10 dakika onerilir

MikroTik RouterOS - Address List

Script ile ipv4.txt'yi cekip firewall address-list olusturun.

/tool fetch url="https://usom.subgatenetwork.com/ipv4.txt" dst-path=usom.txt
/ip firewall address-list remove [find list=usom-block]
:local content [/file get usom.txt contents]
:local lines [:toarray $content]
:foreach ip in=$lines do={
  :if ([:len $ip] > 6) do={
    /ip firewall address-list add list=usom-block address=$ip comment="USOM"
  }
}
/ip firewall filter add chain=forward src-address-list=usom-block action=drop
/ip firewall filter add chain=forward dst-address-list=usom-block action=drop

Not: Buyuk domain listeleri MikroTik icin ideal degil, bu yuzden IPv4 kullanmanizi tavsiye ederiz.

Sophos XG / SFOS

Web arayuz → Web → URL Groups → Add (external kaynak)
Source URL: https://usom.subgatenetwork.com/domain.txt
Format: Custom / Line-based, Sync period: 10 dk
Web Policy'de bu grubu Block action ile kullanin
IP tarafi icin: Hosts & Services → IP Host Group → External ile ipv4.txt'yi ekleyin

Pi-hole / AdGuard Home

DNS seviyesinde engelleme icin domain.txt dogrudan blocklist olarak kullanilabilir.

Pi-hole: Group Management → Adlists → Add:

https://usom.subgatenetwork.com/domain.txt

AdGuard Home: Filters → DNS blocklists → Add blocklist → Custom URL yapistir.

Tavsiye: Pi-hole'da Cron ile pihole -g komutunu her saat calistirmayi unutmayin.

CLI / Manuel Kullanim

Basit bir curl/wget ile dosyalari cekip kendi sisteminizde kullanabilirsiniz.

# Sadece domain listesi
curl -s https://usom.subgatenetwork.com/domain.txt -o domain.txt

# Full liste (domain + url + ipv4 + ipv6 karisik)
curl -s https://usom.subgatenetwork.com/full.txt -o full.txt

# Cron ornegi (her 10 dk)
*/10 * * * * curl -sf https://usom.subgatenetwork.com/domain.txt -o /etc/blocklist/usom.txt

Meta bilgisi (JSON):

curl -s https://usom.subgatenetwork.com/stats.json | jq

Zararli Baglanti Feed'iFortigate ve tum guvenlik cihazlari icin

Fortigate External Threat Feed

pfSense pfBlockerNG

MikroTik RouterOS - Address List

Sophos XG / SFOS

Pi-hole / AdGuard Home

CLI / Manuel Kullanim

Zararli Baglanti Feed'i
Fortigate ve tum guvenlik cihazlari icin