White list off

BerArt · Unread post by **BerArt** » Sat Apr 19, 2008 8:42 am

What is the difference between de host.allow and the ASL whitelist? And why is the ASL white list default “off” in de .conf?

Unread post by **scott** » Sat Apr 19, 2008 1:22 pm

ASL maintains a master whitelist is a global whitelist manager, for multiple components, including denyhosts, ossec, and mod_security. Otherwise whenever you wanted to whitelist something, you would need to do it in 3 different files.

This whitelist is further broken out into 2 levels:

1) Shun whitelists, that prevent the IP from being blocked completely, with either a firewall rule, or an addition to hosts.deny.

2) Application level whitelists (mod_security only). This turns off mod_security for the IP's on the whitelist. Most people should never have to use this.

BerArt · Unread post by **BerArt** » Sat Apr 19, 2008 1:34 pm

So why is it off by default?

Unread post by **scott** » Sat Apr 19, 2008 5:42 pm

Because its dangerous

BerArt · Unread post by **BerArt** » Sun Apr 20, 2008 3:37 am

Thats clear, Thx again!