ZBLACKLIST(1)

πŸ’– ZBLACKLIST(1) β€” the zblacklist manual, bestie edition πŸ’–

okay so bestie, this is zblacklist, from the zblacklist manual page. it's the IP blacklist tool that comes with zmap. pull up a chair, we're gonna read the whole thing together, no skimming, no skipping, promise 🫢


✨ NAME ✨

zblacklist β€” the zmap IP blacklist tool πŸ’…


🌸 SYNOPSIS 🌸

zblacklist [ -b <blacklist> ] [ -w <whitelist> ] [ OPTIONS... ]

literally that's it. flags in, addresses out, slay ✨


πŸ¦‹ DESCRIPTION πŸ¦‹

so ZBlacklist is a network tool, right? and its whole thing β€” its entire main character moment β€” is limiting and deduplicating a list of IP addresses using a blacklist or a whitelist. that's the vibe. you give it addresses, it filters them, it cleans up the dupes. periodt πŸ’œ


πŸŽ€ OPTIONS πŸŽ€

πŸ’« BASIC OPTIONS πŸ’«

  • -b, --blacklist-file=path β€” this is your file of subnets to exclude, written in CIDR notation, one per line. and ngl, the manpage is strongly recommending you actually use this, because you wanna exclude RFC 1918 addresses, multicast, IANA reserved space, and all those other IANA special-purpose addresses. there's an example blacklist file, blacklist.conf, made for exactly this purpose. use it bestie, it's iconic πŸ‘‘
  • -w, --whitelist-file=name β€” the opposite energy: this is your file of subnets to include, also in CIDR notation, also one per line. and here's the thing β€” everything else? all the other subnets? excluded. gone. not invited to the party πŸ™ˆ
  • -l, --log-file=name β€” the file you wanna log to. that's it, that's the option ✨
  • -v, --verbosity β€” how much log detail you want, on a scale of 0-5, and the default is 3. dial it up if you're nosy, dial it down if you're chill πŸ“
  • --no-duplicate-checking β€” don't deduplicate the input addresses. the default is false. so by default it IS deduplicating, got it? no cap πŸ’€
  • --ignore-blacklist-errors β€” ignore invalid entries in the blacklist. the default is false, so heads up: invalid entries will absolutely get noticed unless you turn this on 😭
fr fr, those two defaults being false is doing a lot of work in this page. don't sleep on it.

and that's the whole page bestie, we ate that πŸŒˆπŸ’…

this was from the zblacklist page, and the version info at the bottom says zmap v2.1.1, September 2015 β€” so yeah, vintage, but still iconic. mwah πŸ’–βœ¨πŸŽ€πŸ¦‹πŸŒΈ

πŸ“¦ where this page comes from