Re: user {}

On Tue, Jan 20, 2004 at 10:24:00AM +0100, Johan Segernäs wrote:
> I have some questions regarding user {}.
> 
> I'd like to set up different scanners for different hostmasks but if I
> understood right it would use every scanner matching a mask in user {}?
> 
> Example:
> I want *!*@*.se and some more 'trusted' domains to be scanned with only
> BL and not portscanned.
> 
> Then I'd like for instance weird countries like .pl for be scanned with
> extended all the time and then I want the rest to be scanned with 'default'.
> 
> Is this possible?

I think only by duplicating the test you wish to do, like this:

scanner {
        name = "default";

        /* tests you want to do on *every* user */
        protocol = SOCKS4:1080;
        protocol = SOCKS5:1080;
        protocol = HTTP:80;
        /* etc. */
};

scanner {
        name = "trusted";

        /* Few extra tests for trusted networks */
        protocol = HTTPPOST:80;
        /* etc. */
};

scanner {
        name = "untrusted";

        /* Everything from the "trusted" scanner needs to go here
         * too */
        protocol = HTTPPOST:80;
        /* etc. */
        
        /* A barrage of extra tests that are for untrusted hosts */
        protocol = SOCKS5:4438;
        protocol = SOCKS5:5104;
        protocol = SOCKS5:5113;
        protocol = SOCKS5:5262;
        protocol = SOCKS5:5634;
        /* etc. */
};

user {
        mask = "*!*@*";
        scanner = "default";
};

user {
        mask = "*!*@safe.example.com";
        scanner = "trusted";
};

user {
        mask = "*!*@evil.example.com";
        scanner = "untrusted";
};

Using these settings, users from safe.example.com will be subject to
"default" and "trusted" scanners.  Users from evil.example.com will
be subject to "default" and "untrusted" scanners, and users from
random.example.com will get only the "default" scanner.

I think this is the only way you will do it.  I also do not think
that anyone has ever really tried to have a very complicated set of
user {} blocks so let us know how you get on.

-- 
Andy Smith -- Occasional BOPM Developer And Support Monkey.  Please copy
all BOPM support queries to the BOPM list, _not_ just directly to me!
If I've helped you with BOPM then please check my wishlist!
http://www.amazon.co.uk/exec/obidos/registry/23IJ4U7N4J3X9

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQFADQ9TIJm2TL8VSQsRAggaAJ9VkLrfNFkrGLBYQMSVFL2aanB4tgCeIOQ9
rk4JWckU5XNv4BJBtLfhIzU=
=OrL2
-----END PGP SIGNATURE-----