16 Nov
2010
16 Nov
'10
5:41 p.m.
Hi all,
I want to enable pike module based on IP addresses. I mean ... I don't
want to check if requests from some specific IP addresses trigged the
Pike's threshold. but for all other IP addresses I want to check it.
I was thinking about using some kind of IP addresses' whitelist. The
userblacklist module has some whitelist but it's based on
username/domain not IP addresses.
Can someone please give me some advice how to implement it properly. Is
there any module that will allow me to do it properly?
Best Regards,
Miguel Baptista
17 Nov
17 Nov
12:44 p.m.
Hello,
On 11/16/10 4:41 PM, Miguel Baptista wrote:
Hi all,
I want to enable pike module based on IP addresses. I mean ... I don't
want to check if requests from some specific IP addresses trigged the
Pike's threshold. but for all other IP addresses I want to check it.
I was thinking about using some kind of IP addresses' whitelist. The
userblacklist module has some whitelist but it's based on
username/domain not IP addresses.
Can someone please give me some advice how to implement it properly. Is
there any module that will allow me to do it properly?
you can use permissions module.
if(!allow_source_address("grouptoskip")) {
# do the pike logic here
}
If you have 1-2 addresses that do not change, you can use
if(src_ip==ipaddress...). Default config file for 3.1.0 comes with such
logic.
Cheers,
Daniel
--
Daniel-Constantin Mierla
http://www.asipto.com
1:25 p.m.
Hello,
Thanks Daniel for your help. The permissions module looks exactly what
I was looking for.
Right now I will have around 5 "fxed" IP addresses but in the near
future I might have more than 20 trusted IP addresses. So, That's why I
didn't want to use the if(src_ip==ipaddress...) logic :)
Cheers,
Miguel Baptista
Ps : see you on Monday in Berlin :)
On 17.11.2010 11:44, Daniel-Constantin Mierla wrote:
Hello,
On 11/16/10 4:41 PM, Miguel Baptista wrote:
<javascript:void(0);>
Hi all,
I want to enable pike module based on IP addresses. I mean ... I don't
want to check if requests from some specific IP addresses trigged the
Pike's threshold. but for all other IP addresses I want to check it.
I was thinking about using some kind of IP addresses' whitelist. The
userblacklist module has some whitelist but it's based on
username/domain not IP addresses.
Can someone please give me some advice how to implement it properly. Is
there any module that will allow me to do it properly?
you can use permissions module.
if(!allow_source_address("grouptoskip")) {
# do the pike logic here
}
If you have 1-2 addresses that do not change, you can use
if(src_ip==ipaddress...). Default config file for 3.1.0 comes with
such logic.
Cheers,
Daniel
12:45 p.m.
Miguel Baptista writes:
I want to enable pike module based on IP addresses. I
mean ... I don't
want to check if requests from some specific IP addresses trigged the
Pike's threshold. but for all other IP addresses I want to check it.
I was thinking about using some kind of IP addresses' whitelist. The
userblacklist module has some whitelist but it's based on
username/domain not IP addresses.
Can someone please give me some advice how to implement it properly. Is
there any module that will allow me to do it properly?
for example, you can use permission module allow_source_address()
function (or something like that name) to check if the address is in
the set you don't want to pike on.
-- juha
5121
days inactive
5122
days old
3 comments
3 participants
participants (3)
-
Daniel-Constantin Mierla -
Juha Heinanen -
Miguel Baptista