3 ms·
What I don't understand about NN is how it would be enforced. Would whitelisting services equate to whitelisting ip's? That seems problematic considering how ma
by noahster11 9y ago
What I don't understand about NN is how it would be enforced. Would whitelisting services equate to whitelisting ip's? That seems problematic considering how many companies use AWS or another cloud platform as a cdn or server. Wouldn't Amazon, Google, Microsoft be for NN as it would directly affect their cloud services?
- PaulRobinson 9y agoDNS is a thing. Keep a list of accepted domains. As DNS resolution occurs populate a cache of IP addresses that you can then whitelist. Not hard, a competent developer could build something solid in a week or so using existing tools.
- lmz 9y agoDnsmasq already supports this. It can add resolved IPs of hostnames matching a pattern to ipset ("--ipset" is the option).