Domain whitelist appears to be case sensitive, is it?

Reply
L1 Bithead

Domain whitelist appears to be case sensitive, is it?

I created a domain whitelist called wlDomains, a node based on stdlib.listDomainGeneric and added the whitelist to my domain aggregator.  I then added the indicator "aol.com" (lowercase, without the quotes).

 

When I checked the feed for the output node though, it still listed "AOL.COM".  I had to add an all uppercase entry to wlDomains in order for AOL.COM to be removed.

 

Is this expected?

 

Thanks,

 

Mike

L7 Applicator

Re: Domain whitelist appears to be case sensitive, is it?

Hi @MichaelPDean,

you are right, this should be improved. But the best place is improving the aggregator to support case insensitive matches. I have created and ER to track this: https://github.com/PaloAltoNetworks/minemeld-core/issues/229

 

luigi

L2 Linker

Re: Domain whitelist appears to be case sensitive, is it?

Coming back to this, I see the option was closed back in Sep, 2017, but I find that the DNS white list is still case sensitive (I white listed aol.com, the domain feed has AOL.COM, still in the feed as a suspicious domain).

 

Is it going to remain this way?

 

Thank you.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!