OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: DNS Whitelisting

From: Wietse Venema (wietseporcupine.org)
Date: Thu Aug 26 2010 - 16:14:36 CDT


Noel Jones:
> This looks like a useful concept. If we use "*" as an octet
> wildcard, we'll need to use something else as the weight modifier.
> dnsbl_site=127.0.*.3w1 seems reasonable.

On 8/26/2010 2:28 PM, Wietse Venema wrote:
> You can't use an alphanumerical operator such as "w", because the
> "=127.0.*.3" portion is optional.

Noel Jones:
> Rats. =127.0.*.3^1 maybe? Your suggestion? * is such a
> natural wildcard I would hate to use something else for the octet.

Use "*" for the multiplier and "?" for the wildcard?

Another idea is to implement wildcards with net/mask patterns:

example.com=127.0.0.3/255.255.0.255*1

The more precise solution is to implement wildcards with ranges:

example.com=127.0.[0-128].3*1
example.com=127.0.[0-5,6-9].3*1

        Wietse