Hi,
since I'm new to IntelMQ, I was just wondering if Clean-MX feeds are still active/available?
According to description at http://support.clean-mx.de/clean-mx/xmlviruses?response=alive&format=csv &domain= I did provide useragent and notified Clean-MX, but never got their confirmation.
The status of this feed is "Active" at https://github.com/certtools/intelmq/blob/develop/docs/Feeds.md#cleanmx so I just want to check if anyone had/has the same situation?
Regards,
-- Tomislav
Hi,
Do you can connect with tools like curl, e.g.:
curl "http://support.clean-mx.de/clean-mx/xmlphishing?response=alive&format=cs..." -A 'your user agent'
For me it works with both curl and intelmq.
On 08/03/2017 09:33 AM, Tomislav Protega wrote:
I did provide useragent and notified Clean-MX, but never got their confirmation.
What do you mean with confirmation?
The user agent has to be configured in the parameter 'http_user_agent' in the bot's config.
Sebastian
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Hi,
The user agent has to be configured in the parameter 'http_user_agent' in the bot's config.
I know this. I did test clean-mx bot with included useragent. It's like useragent is not being recognized and there's no event data.
Please, if you open http://support.clean-mx.de/clean-mx/xmlphishing?response=alive&format=cs v&domain= in web browser there's an explanation about why and how to register useragent at Clean-MX to gain access to feeds. I did all by their instructions.
It seems like our defined useragent is either not accepted by them or something else. And that's why I said we didn't get their e-mail confirmation if our defined useragent is accepted by them. Probably this is why it's not working.
Do you have any info if Clean-MX has some new policy restrictions concerning registering new useragent?
- -- Tomislav
On 03.08.2017 09:51, Sebastian Wagner wrote:
Hi,
Do you can connect with tools like curl, e.g.:
curl "http://support.clean-mx.de/clean-mx/xmlphishing?response=alive&format
=csv&domain="
- -A 'your user agent'
For me it works with both curl and intelmq.
On 08/03/2017 09:33 AM, Tomislav Protega wrote:
I did provide useragent and notified Clean-MX, but never got their confirmation.
What do you mean with confirmation?
The user agent has to be configured in the parameter 'http_user_agent' in the bot's config.
Sebastian
Hi,
On 08/03/2017 11:33 AM, Tomislav Protega wrote:
The user agent has to be configured in the parameter 'http_user_agent' in the bot's config.
I know this. I did test clean-mx bot with included useragent. It's like useragent is not being recognized and there's no event data.
So you get a blank page back or the same "error message" as if you did not supply a user agent?
My user-agent has two parts, a user-readable 'description' and a hex-string.
It seems like our defined useragent is either not accepted by them or something else. And that's why I said we didn't get their e-mail confirmation if our defined useragent is accepted by them. Probably this is why it's not working.
Sorry, I can't help with this.
Do you have any info if Clean-MX has some new policy restrictions concerning registering new useragent?
No. I only have access for development purpose and I did not get it myself.
Sebastian
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
So you get a blank page back or the same "error message" as if you did not supply a user agent?
IntelMQ (clean-mx parser) drops an error, but only because the collector retreives the content which is actually Clean-MX instructions I was talking about earlier and thus parser doesn't have real data for parsing.
- -- Tomislav
On 03.08.2017 12:31, Sebastian Wagner wrote:
Hi,
On 08/03/2017 11:33 AM, Tomislav Protega wrote:
The user agent has to be configured in the parameter 'http_user_agent' in the bot's config.
I know this. I did test clean-mx bot with included useragent. It's like useragent is not being recognized and there's no event data.
So you get a blank page back or the same "error message" as if you did not supply a user agent?
My user-agent has two parts, a user-readable 'description' and a hex-string.
It seems like our defined useragent is either not accepted by them or something else. And that's why I said we didn't get their e-mail confirmation if our defined useragent is accepted by them. Probably this is why it's not working.
Sorry, I can't help with this.
Do you have any info if Clean-MX has some new policy restrictions concerning registering new useragent?
No. I only have access for development purpose and I did not get it myself.
Sebastian
