user8446 wrote

Just noticed at https://sslbl.abuse.ch/blacklist/  that it mentions that the Dyre C&C botnet is a separate list so add this one too:

curl -k -1 -m 40 -o /tmp/ramdisk/abuse-dyre.rules https://sslbl.abuse.ch/blacklist/dyre_sslipblacklist.rules


Note that depending on which version udpate script you are on change tmp to mnt