Re: [Pdns-users] Recursor: Black list

2014-10-28 Thread Ciro Iriarte
2014-10-27 14:27 GMT-03:00 Aki Tuomi : > On Mon, Oct 27, 2014 at 01:56:17PM -0300, Ciro Iriarte wrote: >> 2014-10-27 3:46 GMT-03:00 Aki Tuomi : >> > >> > In a way i'd chosen sqlite3 instead as it is pretty much on par with cdb. >> > But, to make it work properly, i'd just add "*.domain.com", and wh

Re: [Pdns-users] Recursor: Black list

2014-10-27 Thread Aki Tuomi
On Mon, Oct 27, 2014 at 12:58:43PM -0500, k...@rice.edu wrote: > On Mon, Oct 27, 2014 at 07:27:15PM +0200, Aki Tuomi wrote: > > On Mon, Oct 27, 2014 at 01:56:17PM -0300, Ciro Iriarte wrote: > > > 2014-10-27 3:46 GMT-03:00 Aki Tuomi : > > > > > > > > In a way i'd chosen sqlite3 instead as it is pret

Re: [Pdns-users] Recursor: Black list

2014-10-27 Thread k...@rice.edu
On Mon, Oct 27, 2014 at 07:27:15PM +0200, Aki Tuomi wrote: > On Mon, Oct 27, 2014 at 01:56:17PM -0300, Ciro Iriarte wrote: > > 2014-10-27 3:46 GMT-03:00 Aki Tuomi : > > > > > > In a way i'd chosen sqlite3 instead as it is pretty much on par with cdb. > > > But, to make it work properly, i'd just ad

Re: [Pdns-users] Recursor: Black list

2014-10-27 Thread Aki Tuomi
On Mon, Oct 27, 2014 at 01:56:17PM -0300, Ciro Iriarte wrote: > 2014-10-27 3:46 GMT-03:00 Aki Tuomi : > > > > In a way i'd chosen sqlite3 instead as it is pretty much on par with cdb. > > But, to make it work properly, i'd just add "*.domain.com", and when you > > lookup, > > you could reduce it l

Re: [Pdns-users] Recursor: Black list

2014-10-27 Thread Ciro Iriarte
2014-10-27 3:46 GMT-03:00 Aki Tuomi : > > In a way i'd chosen sqlite3 instead as it is pretty much on par with cdb. > But, to make it work properly, i'd just add "*.domain.com", and when you > lookup, > you could reduce it like this with get() > > www.my.long.name.com => NOT FOUND > *.my.long.name

Re: [Pdns-users] Recursor: Black list

2014-10-26 Thread Aki Tuomi
On Mon, Oct 27, 2014 at 12:49:31AM -0300, Ciro Iriarte wrote: > 2014-10-26 1:47 GMT-03:00 Ciro Iriarte : > > 2014-10-26 1:17 GMT-03:00 Ciro Iriarte : > >> 2014-10-20 15:12 GMT-03:00 k...@rice.edu : > >>> On Mon, Oct 20, 2014 at 02:09:05PM -0300, Ciro Iriarte wrote: > 2014-10-20 13:29 GMT-03:00

Re: [Pdns-users] Recursor: Black list

2014-10-26 Thread Ciro Iriarte
2014-10-26 1:47 GMT-03:00 Ciro Iriarte : > 2014-10-26 1:17 GMT-03:00 Ciro Iriarte : >> 2014-10-20 15:12 GMT-03:00 k...@rice.edu : >>> On Mon, Oct 20, 2014 at 02:09:05PM -0300, Ciro Iriarte wrote: 2014-10-20 13:29 GMT-03:00 Robert Mortimer : > Hi, > > Just to add a bit less light

Re: [Pdns-users] Recursor: Black list

2014-10-25 Thread Ciro Iriarte
2014-10-26 1:17 GMT-03:00 Ciro Iriarte : > 2014-10-20 15:12 GMT-03:00 k...@rice.edu : >> On Mon, Oct 20, 2014 at 02:09:05PM -0300, Ciro Iriarte wrote: >>> 2014-10-20 13:29 GMT-03:00 Robert Mortimer : >>> > Hi, >>> > >>> > Just to add a bit less light, we implemented this sort of thing about 5 >>>

Re: [Pdns-users] Recursor: Black list

2014-10-25 Thread Ciro Iriarte
2014-10-20 15:12 GMT-03:00 k...@rice.edu : > On Mon, Oct 20, 2014 at 02:09:05PM -0300, Ciro Iriarte wrote: >> 2014-10-20 13:29 GMT-03:00 Robert Mortimer : >> > Hi, >> > >> > Just to add a bit less light, we implemented this sort of thing about 5 >> > years back >> > and now with the aid of a small

Re: [Pdns-users] Recursor: Black list

2014-10-20 Thread Ciro Iriarte
2014-10-20 15:15 GMT-03:00 bert hubert : > On Mon, Oct 20, 2014 at 01:12:07PM -0500, k...@rice.edu wrote: >> > Also, I thought about adding some helpful LUA bits to report date/time >> > or the client's IP address, but from what I understood, only one LUA >> > script can be added to the recursor, m

Re: [Pdns-users] Recursor: Black list

2014-10-20 Thread bert hubert
On Mon, Oct 20, 2014 at 01:12:07PM -0500, k...@rice.edu wrote: > > Also, I thought about adding some helpful LUA bits to report date/time > > or the client's IP address, but from what I understood, only one LUA > > script can be added to the recursor, maybe a super monster script > > could be able

Re: [Pdns-users] Recursor: Black list

2014-10-20 Thread k...@rice.edu
On Mon, Oct 20, 2014 at 02:09:05PM -0300, Ciro Iriarte wrote: > 2014-10-20 13:29 GMT-03:00 Robert Mortimer : > > Hi, > > > > Just to add a bit less light, we implemented this sort of thing about 5 > > years back > > and now with the aid of a small script have a solution which is fully RPZ > > comp

Re: [Pdns-users] Recursor: Black list

2014-10-20 Thread Ciro Iriarte
2014-10-20 13:29 GMT-03:00 Robert Mortimer : > Hi, > > Just to add a bit less light, we implemented this sort of thing about 5 years > back > and now with the aid of a small script have a solution which is fully RPZ > compatable. Using PDNS recursor and LUA, which can hadle an RPZ feed of about >

Re: [Pdns-users] Recursor: Black list

2014-10-20 Thread Ciro Iriarte
2014-10-20 11:54 GMT-03:00 Curtis Maurand : > On 10/20/2014 9:40 AM, Ciro Iriarte wrote: > > 2014-10-17 13:35 GMT-03:00 k...@rice.edu : > > Hi Ciro, > > We used a CDB key value store. It was easy to use/update and had > very good performance. "grepping" is O(n*n) so it will tank as > your list grow

Re: [Pdns-users] Recursor: Black list

2014-10-20 Thread Robert Mortimer
Hi, Just to add a bit less light, we implemented this sort of thing about 5 years back and now with the aid of a small script have a solution which is fully RPZ compatable. Using PDNS recursor and LUA, which can hadle an RPZ feed of about four thousand records and around 5,000 QPS. We did stres

Re: [Pdns-users] Recursor: Black list

2014-10-20 Thread Curtis Maurand
On 10/20/2014 9:40 AM, Ciro Iriarte wrote: 2014-10-17 13:35 GMT-03:00 k...@rice.edu : Hi Ciro, We used a CDB key value store. It was easy to use/update and had very good performance. "grepping" is O(n*n) so it will tank as your list grows and you really don't want to slow down your DNS lookups.

Re: [Pdns-users] Recursor: Black list

2014-10-20 Thread Ciro Iriarte
2014-10-17 13:35 GMT-03:00 k...@rice.edu : >> > Hi Ciro, >> > >> > We used a CDB key value store. It was easy to use/update and had >> > very good performance. "grepping" is O(n*n) so it will tank as >> > your list grows and you really don't want to slow down your DNS >> > lookups. >> > >> > Regard

Re: [Pdns-users] Recursor: Black list

2014-10-17 Thread abang
There is no need to restart the Recursor. See http://doc.powerdns.com/html/recursor-scripting.html "At runtime, rec_control reload-lua-script can be used to either reload the script from its current location, or, when passed a new file name, load one from a new location. A failure to parse the

Re: [Pdns-users] Recursor: Black list

2014-10-17 Thread k...@rice.edu
> > Hi Ciro, > > > > We used a CDB key value store. It was easy to use/update and had > > very good performance. "grepping" is O(n*n) so it will tank as > > your list grows and you really don't want to slow down your DNS > > lookups. > > > > Regards, > > Ken > > Hi Ken, I'll look at the LUA+CDB mi

Re: [Pdns-users] Recursor: Black list

2014-10-17 Thread Ciro Iriarte
2014-10-17 9:42 GMT-03:00 k...@rice.edu : > On Fri, Oct 17, 2014 at 01:18:36AM -0300, Ciro Iriarte wrote: >> Hi!, I've seen the published LUA scripts examples and seems pretty >> simple to redirect certain domains (one?) just modifying examples >> available, but what about have a list of hundreds o

Re: [Pdns-users] Recursor: Black list

2014-10-17 Thread k...@rice.edu
On Fri, Oct 17, 2014 at 01:18:36AM -0300, Ciro Iriarte wrote: > Hi!, I've seen the published LUA scripts examples and seems pretty > simple to redirect certain domains (one?) just modifying examples > available, but what about have a list of hundreds or thousands of > sites to blacklist?. > > I wo

[Pdns-users] Recursor: Black list

2014-10-16 Thread Ciro Iriarte
Hi!, I've seen the published LUA scripts examples and seems pretty simple to redirect certain domains (one?) just modifying examples available, but what about have a list of hundreds or thousands of sites to blacklist?. I would like to avoid fancy options like database conections for example, will