Merge pull request #4 from claudex/rfc3849

Add RFC 3849 - IPv6 prefix for documentation

README.md

@@ -15,6 +15,7 @@ are available in one of the list. The list can be globally enabled or disabled i
 - [lists/multicast](lists/multicast) - known IPv4 multicast CIDR blocks
 - [lists/public-dns](lists/public-dns) - IP addresses of public DNS resolver
 - [lists/rfc1918](lists/rfc1918) - RFC 1918 network subnets
+- [lists/rfc3849](lists/rfc3849) - RFC 3849 - Documentation prefix for ipv6
 - [lists/rfc5735](lists/rfc5735) - RFC 5735 CIDR blocks - Special Use IPv4 Addresses
 - [lists/second-level-tlds](lists/second-level-tlds) - Mozilla list of second level top-level domains
 - [lists/tlds](lists/tlds) - top-level domains

lists/rfc3849/list.json

@@ -0,0 +1,16 @@
+{
+  "list": [
+    "2001:DB8::/32"
+  ],
+  "type": [
+    "cidr"
+  ],
+  "matching_attributes": [
+    "ip-src",
+    "ip-dst",
+    "domain|ip"
+  ],
+  "description": "Event contains one or more entries part of the IPv6 documentation prefix (RFC 3849)",
+  "version": 2,
+  "name": "List of RFC 3849 CIDR blocks"
+}