fix: [publicdns] IP addresses should be cidr

lists/public-dns-v4/list.json

@@ -1512,6 +1512,6 @@
     "domain|ip"
   ],
   "name": "List of known IPv4 public DNS resolvers",
-  "type": "string",
+  "type": "cidr",
   "version": 20210604
 }

lists/public-dns-v6/list.json

@@ -77,6 +77,6 @@
     "domain|ip"
   ],
   "name": "List of known IPv6 public DNS resolvers",
-  "type": "string",
+  "type": "cidr",
   "version": 20210604
 }

tools/generate-publicdns.py

@@ -26,7 +26,7 @@ def process(file):
     publicdns_ipv4_warninglist = {
         'description': 'Event contains one or more public IPv4 DNS resolvers as attribute with an IDS flag set',
         'name': 'List of known IPv4 public DNS resolvers',
-        'type': 'string',
+        'type': 'cidr',
         'matching_attributes': ['ip-src', 'ip-dst', 'domain|ip']
     }
     generate(lipv4, publicdns_ipv4_warninglist, publicdns_ipv4_dst)
@@ -36,7 +36,7 @@ def process(file):
     publicdns_ipv6_warninglist = {
         'description': 'Event contains one or more public IPv6 DNS resolvers as attribute with an IDS flag set',
         'name': 'List of known IPv6 public DNS resolvers',
-        'type': 'string',
+        'type': 'cidr',
         'matching_attributes': ['ip-src', 'ip-dst', 'domain|ip']
     }
     generate(lipv6, publicdns_ipv6_warninglist, publicdns_ipv6_dst)