spamhaus and dshield drop lists to shorewall blrules simple script

update_blrules.sh

#!/bin/sh

echo "#From dshield.org" > /tmp/blacklist
wget  -q -O - http://feeds.dshield.org/block.txt | awk '/^[0-9]/ { print "DROP", "net:"$1"/24", "all"}' >> /tmp/blacklist
echo "#From spamhaus.org" >> /tmp/blacklist
wget -q -O - http://www.spamhaus.org/drop/drop.lasso | awk '/^[0-9]/ { print "DROP", "net:"$1, "all"}' >> /tmp/blacklist

mv /tmp/blacklist /etc/shorewall/blrules

shorewall refresh &>/dev/null

Make it executable with chmod +x update_blrules.sh
And have it in a cron job for scheduled updates. For a SoHo firewall, once a day seems enough.