Re: Modifying scans done on certain types of hosts

On Tue, Jul 13, 2004 at 08:53:47AM -0700, m3lk0rz ... wrote:
> How might one go about defining the user portion of the .conf file for BOPM 
> so that it would do the following:
> 
> - All users are scanned with the "default" scanner, then...
> 
> - Those who do not match criteria of being a dialup/dynamic host (ie. 
> *!*@*.dialup.*, *!*@*.dynamic.*, etc.) are not checked with the "extended" 
> scanner, but everybody else is.

I don't believe there is a way to specify a negative match, only a
positive.  Can I ask why you need to do this?  As far as I can see
your scheme has a number of problems:

- Proxies are still found even on the most short-lived of dialup
  connections.

- ISPs are not very consistent with their naming schemes, often
  including terms like "dialup" and "dynamic" for both short-lived
  dialups and arbitrarily long DSL leases.  They even sometimes end
  up giving dynamic-looking hostnames to static business SDSL unless
  the customer pays more or shouts a lot.

- Reverse DNS isn't always there.

-- 
Andy Smith -- Occasional BOPM Developer And Support Monkey.  Please copy
all BOPM support queries to the BOPM list, _not_ just directly to me!
If I've helped you with BOPM then please check my wishlist!
http://www.amazon.co.uk/exec/obidos/registry/23IJ4U7N4J3X9

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (FreeBSD)

iD8DBQFA9Bc2IJm2TL8VSQsRAv//AKCWUtPw1x5gTrUQ/+z4FUsTRcr7BQCgyGTX
p3+cbvXvTHgBiwYkXl7JkyA=
=hZd4
-----END PGP SIGNATURE-----