From 7d347d6ff6a7ec622636867cca84be34bc58d0bf Mon Sep 17 00:00:00 2001 From: Sascha Rommelfangen Date: Thu, 18 Jan 2018 16:07:15 +0100 Subject: [PATCH] external links should not be exluded by the warning list --- mail_to_misp.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/mail_to_misp.py b/mail_to_misp.py index ff0a1ee..db92104 100755 --- a/mail_to_misp.py +++ b/mail_to_misp.py @@ -260,9 +260,9 @@ for entry in urllist: syslog.syslog(domainname) if domainname not in excludelist: if domainname in internallist: - add_attribute(new_event, 'link', entry, 'Internal reference', False, enforcewarninglist, sighting) + add_attribute(new_event, 'link', entry, 'Internal reference', False, False, sighting) elif domainname in externallist: - add_attribute(new_event, 'link', entry, 'External analysis', False, enforcewarninglist, sighting) + add_attribute(new_event, 'link', entry, 'External analysis', False, False, sighting) else: comment = "" if (domainname in noidsflaglist) or (hostname in noidsflaglist):