From 1b0ac3c6313f315b4ae4938fb0fb40a095d64575 Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Tue, 19 Apr 2016 15:19:47 +0200
Subject: [PATCH] RFC 1918 networks

---
 lists/rfc1918/list.json | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)
 create mode 100644 lists/rfc1918/list.json

diff --git a/lists/rfc1918/list.json b/lists/rfc1918/list.json
new file mode 100644
index 0000000..27675d2
--- /dev/null
+++ b/lists/rfc1918/list.json
@@ -0,0 +1,16 @@
+{
+  "list": [
+    "10.0.0.0/8",
+    "172.16.0.0/12",
+    "192.168.0.0/16"
+  ],
+  "type": [
+    "cidr"
+  ],
+  "matching_attributes": [
+    "ip-src",
+    "ip-dst"
+  ],
+  "description": "Event contains one or more entries part of the RFC 1918 CIDR blocks",
+  "name": "List of RFC 1918 CIDR blocks"
+}