Re: policyd-weight feature request

[Justin Piszcz]

On Thu, 10 Jan 2008, Robert Felber wrote:

On Sun, Dec 23, 2007 at 06:23:11AM -0500, Justin Piszcz wrote:

Hi,

Was wondering if support for whitelists would be made available in 
policyd-weight?

For example, see: http://www.dnswl.org/

I add it in here:

  'list.dnswl.org',                0.00,    -5.0,          'DNSWL',

change this to
'list.dnswl.org',                -5.0,    0,          'DNSWL',

The first score is added if the RBL/DNSWL has hit, i.e. the client is listed.
If the HIT score is greater than 0 it is treated as a RBL hit, if the score is
less than 0 (eg: -1) it is treated as a DNSWL hit.

But it still counts as a 'bad' RBL, is there any chance of making a whitelist 
section where if X number of
whitelist RBLs include a certain IP -or- the value is less than X it is allowed?

This then leads to a second question, perhaps one wants to place emphasis or 
weight upon the trust level:

Per: http://www.dnswl.org/tech

Trustworthiness / Score (127.0.x.Y):

    * 0 = none - only avoid outright blocking (eg Hotmail, Yahoo mailservers, 
-0.1)
    * 1 = low - reduce chance of false positives (-1.0)
    * 2 = medium - make sure to avoid false positives but allow override for 
clear cases (-10.0)
    * 3 = high - avoid override (-100.0).

So it would need to be something like:

list.dnswl.org ret=127.0.0.0  -5.0
list.dnswl.org ret=127.0.0.1  -3.0


Just an idea..  But the main request is a @whitelist for RBL's to help reduce 
false positives.

Justin.

____________________________________________________________
Policyd-weight Mailinglist - http://www.policyd-weight.org/

--
   Robert Felber (PGP: 896CF30B)
   Munich, Germany

____________________________________________________________
Policyd-weight Mailinglist - http://www.policyd-weight.org/

Ah!! Thanks!

____________________________________________________________
Policyd-weight Mailinglist - http://www.policyd-weight.org/