Why don’t you run a lq to gather which hosts have that service in unknown and based on that you either choose to edit/create a rule to disable or you create a simple script to increment those hosts on the rules.mk
Why don’t you run a lq to gather which hosts have that service in unknown and based on that you either choose to edit/create a rule to disable or you create a simple script to increment those hosts on the rules.mk