<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"MS Mincho";
panose-1:2 2 6 9 4 2 5 8 3 4;}
@font-face
{font-family:"MS Mincho";
panose-1:2 2 6 9 4 2 5 8 3 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"\@MS Mincho";
panose-1:2 2 6 9 4 2 5 8 3 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal>All,<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I am pleased to announce that we (err me mostly) at ThreatSTOP have finally got our stuff together and can create RPZ zone versions of our IP reputation feeds. At least I think we can, in that it works for us. If anyone else would be interested in testing the feeds please contact by email me so I can share a TSIG key, set up NOTIFY to your server etc. <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>We are offering for trial our “basic”, “Botnet”, “unix server” and “advanced” feeds. <o:p></o:p></p><p class=MsoNormal>Basic is primarily based off Dshield<o:p></o:p></p><p class=MsoNormal>Botnet is our botnet C&C feed<o:p></o:p></p><p class=MsoNormal>Unix Serer is our SSH cracking feed<o:p></o:p></p><p class=MsoNormal>Advanced is pretty much everything else<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>There is overlap between the feeds but it is worth subscribing to all four if you have the capacity to do so. We will probably add additional feeds later.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Disclaimers/small print:<o:p></o:p></p><p class=MsoNormal>Right now the rpz distribution of these feeds is being offered for free so we can work out RPZ issues, normally we would expect to charge for the service and once we leave this initial testing/beta period we will do so (although fees may be waived at our discretion for certain subscribers). There is effectively no documentation of the feeds offered at present beyond a very basic readme. While I hope to keep the feeds updated properly during the test period I cannot guarantee that they will be updated, will work with your DNs server etc. etc. and I make absolutely no guarantees about the length of time we will be offering a test.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Share & Enjoy<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Francis<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span style='font-size:10.0pt'>Francis J.M. Turner <o:p></o:p></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><span style='font-size:10.0pt'>VP Product Management & OEM - <a href="http://www.threatstop.com/"><span style='color:windowtext'>http://www.threatstop.com/</span></a></span><span style='font-size:10.0pt;font-family:"Courier New"'><br></span><b><span style='color:black'><a href="http://www.threatstop.com/"><span style='color:black;text-decoration:none'>Threat</span><span style='color:white;background:red;mso-highlight:red;text-decoration:none'>STOP</span></a></span></b><span style='font-size:10.0pt'> "Stop Botnets Stealing from You!"</span><span style='font-size:10.0pt;font-family:"Courier New"'> <br></span><span style='font-size:10.0pt'>email: <a href="mailto:francis@threatstop.com"><span style='color:windowtext'>francis@threatstop.com</span></a> - skype: francis.turner.threatstop<br>fixed: +44-(0)1223-967-447 - cell: +33-(0)6-2867-5531</span><span style='font-size:10.0pt;font-family:"Courier New"'><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>That knowledge which stops at what it does not know, is the<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Courier New"'>highest knowledge. -- Chuang Tzu, 4th c. B.C.</span><span lang=EN-IE><o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>