Re: Minutes from San Diego

On Fri, Jan 19, 2001 at 01:06:07PM +0100, Shane Kerr wrote:
> Of course, you have probably noticed the "when we spot..." from the
> previous paragraph.  The existing software does not automatically block
> people - it has to be done manually.  The new version of our Whois
> server, currently in beta, tracks number of queries from a specific IP
> for either personal or network data, and limits them for given time
> periods.  Continued abuse automatically disables access.  It's not
> perfect, because it's based on IP's, and dial-up users or owners of
> blocks of data can bypass the blocks, but hopefully spotting the users
> who mine data in this fashion will be easier.

This is what NORID (the Norwegian registry) does in it's Whois server
as well.

> I wonder about existing LDAP servers and their ability to do this kind
> of dynamic blocking.  Hmm....

We (well, NORID) plan to put the Whois data in an LDAP server, this is
one of the requirements though. We might try to implement this in Open-
LDAP.

I think LDAP might be a good alternative, but we should probably write
up requirements first of all.

Stig