3 ms·
Why is this not done as an RBL-style DNS-based blacklist? The queries are cheaper, mirroring and distributed caching are already built-in... Of course, chargin
by HerraBRE 16y ago
Why is this not done as an RBL-style DNS-based blacklist? The queries are cheaper, mirroring and distributed caching are already built-in...
Of course, charging for access would be harder, but you can still offer to sell people lists who don't want to rely on external infrastructure.
- itzekocke 16y agoI had DNS RBL in mind because of your mentioned advantages. But the service needs the new domain-feed done by users requesting the service. As far as I know this is not possible by DNS RBL. And: for me it was easier to develop a web based service than doing new things with bind. Gerold
- HerraBRE 16y agoFair 'nuff. :-) In case you want to revisit, dynamic DNS is really easy to do with PowerDNS (an alternative to bind). I've combined PowerDNS and Redis with a relatively thin Python glue layer, and then done some funky things with subclassing that to create programmatic answers to certain queries instead of just looking things up. PowerDNS also has native backends for MySQL and some others. If you're interested in my Python/Redis stuff, the code is here: https://github.com/pagekite/PyPdnsRedis/ https://github.com/pagekite/PyPdnsRedis/