Gateway details:
CPDBL utilizes the rate limiting policy in SecureXL. Therefore blocking is done in fastpath and should not impact performance noticably.
Connections from IPs listed in the blocklists are only blocked INBOUND. Outgoing communications are currently allowed as blocking both ways kills SecureXL.

VSX:
Not tested.

Workflow:
The server(opendbl.net) downloads all the lists nightly and

    Validates that all entries are valid IPs.
    Baselines the lists, makes sure a list does not suddenly grow enormously.
    Publishes the lists for the clients to download.


The client:

    Downloads fresh lists every 12 hours
    Times out entries in the block-table after 12 hours, hence if cpdbl.net is unavailable all entries will be removed at this time.
    Validates that only entries containing numbers and "-" are read into the system. (to stop possible code injection)
    Installs validated entries into blocking tables and waits for 12 hours before starting over again.


To monitor the blocked IP addresses:
	
	R77.30:
	In SmartView Tracker, search for "SecureXL message: Quota violation".

	R80:
	In SmartLog, search for "blade:Firewall Alert".