Domain whitelist appears to be case sensitive, is it?

Reply
Highlighted
L1 Bithead

Domain whitelist appears to be case sensitive, is it?

I created a domain whitelist called wlDomains, a node based on stdlib.listDomainGeneric and added the whitelist to my domain aggregator.  I then added the indicator "aol.com" (lowercase, without the quotes).

 

When I checked the feed for the output node though, it still listed "AOL.COM".  I had to add an all uppercase entry to wlDomains in order for AOL.COM to be removed.

 

Is this expected?

 

Thanks,

 

Mike

Highlighted
L7 Applicator

Hi @MichaelPDean,

you are right, this should be improved. But the best place is improving the aggregator to support case insensitive matches. I have created and ER to track this: https://github.com/PaloAltoNetworks/minemeld-core/issues/229

 

luigi

Highlighted
L2 Linker

Coming back to this, I see the option was closed back in Sep, 2017, but I find that the DNS white list is still case sensitive (I white listed aol.com, the domain feed has AOL.COM, still in the feed as a suspicious domain).

 

Is it going to remain this way?

 

Thank you.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!