The Risk based policies include an "IP Address Rule" which states encouragingly:
"Dynamically consume from the Datasource"
with a URL.
My plan was to create dynamic URLs (with PHP) that query some RBL/web services for addresses that adds risk value.

BUT, upon further investigation, "Dynamically" actually means it gets the whole "URL" (file) and caches it.

What would be really useful would be to query web RBL services via HTTP APIs and DNS queries.
The online services we subscribe to do not allow full text dumps of their content.

Thanks for reading,

Comments