OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Michael Tokarev (mjttls.msk.ru)
Date: Tue Feb 27 2001 - 16:15:04 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Some time ago I thinked about this, and tried to draw
    a proposal. But failed: such sort of lookup mechanism
    (a configuration for it) looks like the whole programming
    language: what if responce is positive or negative, or
    temporary failed? What to do with different responses
    (the best thik of is orbs with 127.0.0.{1,2,3,4} A records
    for hosts from different sources, and the map should take
    some action on one values and some other action on other)?
    How to extract useful info from mail-abuse TXT records?
    How to specify type of record to query (simpler, but still)?
    I can say that this "dns map" is complete if one can construct
    almost complete algorithm used by postfix's `smtp' agent to
    find the nexthop based on MX and A records, and at least
    current postfix's rbl checks using only terms of "dns map".

    If someone can suggest something useable (in terms of how
    to specify all this in main.cf, or at least in some other
    file like e.g. ldap uses), then that's good and may be
    implemented (I'm very interested in this "dns map" here,
    really).

    Regards,
     Michael.

    "Ronald F. Guilmette" wrote:
    >
    > The notion of various map types, as employed in Postfix, is quite
    > a nice abstraction. But personally, I'd like to see it taken a
    > bit farther.
    >
    > Specifically, looking up IP addresses in the various available DNS
    > blacklists could be treated as just another specialized type of
    > map lookup.
    >
    > To be even more specific, I'd like to be able to refer to a map
    > like:
    >
    > dns.byaddress:rss.mail-abuse.org
    >
    > I also have some ideas of my own regarding ``by name'' DNS-based
    > filtering lists. Thus, I'd like to also be able to refer to something
    > like:
    >
    > dns.byname:spammer-domains.monkeys.com
    >
    > Comments?