Whitelisting Dynamic DNS hostnames

msklut

• May 09, 2022 10:47

Any suggestions for whitelisting dynamic DNS hostnames? Need this for cPhulk, ModSecurity and Mod Evasive? Based on ModSecurity

• 

  cPRex Jurassic Moderator

  • May 10, 2022 18:31

  Hey there! I wouldn't expect these to be different than whitelisting any other hostname on the system. Since you'll want to be examining the hostname and not the IP address, any tool that will accept a domain name will work. Unfortunately none of the tools you mention work with domain names as they all only scan IP addresses, so I don't have much help to provide with those. I do see that ModSecurity has the SERVER_NAME variable, but they don't provide any details on how to use that for blocking the incoming connections. mod_evasive documents their IP detection process here, and also has no mention of hostnames: GitHub - jzdziarski/mod_evasive: Apache mod_evasive module

  0
• 

  msklut

  • May 11, 2022 11:12

  Unfortunately none of the tools you mention work with domain names as they all only scan IP addresses, so I don't have much help to provide with those.

  
  I noticed there was a

  0
• 

  cPRex Jurassic Moderator

  • May 11, 2022 13:39

  I'll run that by the team in next week's features meeting!

  0
• 

  msklut

  • May 27, 2022 22:18

  I'll run that by the team in next week's features meeting!

  
  Just following up to see if you had any updates since the meeting. Thanks!

  0
• 

  cPRex Jurassic Moderator

  • May 27, 2022 22:22

  I did send it over to the team so they are aware it needs some action. At this point it's not up to me, but up to the developers to act on the request or not, so I likely won't have updates on it for a bit. The best way to follow along is to comment on the feature request and then you'll receive a notification when there is a change to it.

  0

Please sign in to leave a comment.