[Rtir] Changing Blocks state on correspond

Tony Arnold tony.arnold at manchester.ac.uk
Thu Jan 24 11:17:09 EST 2013


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 24/01/13 16:00, James Mcloughlin wrote:
> On 24/01/13 15:30, Ruslan Zakirov wrote:
>> On Thu, Jan 24, 2013 at 6:46 PM, Tony Arnold 
>> <tony.arnold at manchester.ac.uk> wrote:
>>> On much older versions of RTIR the state of blocks would get 
>>> updated based on correspondence. Thus I would create a block, 
>>> this would notify the firewall team and set the state to
>>> Pending Activation. When the firewall team reply, the state
>>> would get set to Activated. Similarly for block removal.
>>> 
>>> This doesn't seem to happen any more. How can I write a scrip 
>>> that will do this?
> 
>> This should still work. There is an option in RTIR config to 
>> control this functionality with regexp. Which version do you
>> test?
> 
> 
> Here is the part of the config that you are looking for I think:
> 
> # When requestor replies on the block in pending state RTIR #
> changes state, you can set regular expresion so state would # be
> changed only when it matches Set($RTIR_BlockAproveActionRegexp,
> undef);
> 
> eg:
> 
> Set($RTIR_BlockAproveActionRegexp, firewallteam at noc.isp.com);
> 
> It is not clear if this changes the block state: a) sending an
> email to place a block b) sending an email to remove a block c)
> both.

Thanks. And I assume that if left undef, no state change takes place
at all?

I'll try it out.

Regards,
Tony.
- -- 
Tony Arnold,                        Tel: +44 (0) 161 275 6093
Head of IT Security,                Fax: +44 (0) 705 344 3082
University of Manchester,           Mob: +44 (0) 773 330 0039
Manchester M13 9PL.                 Email: tony.arnold at manchester.ac.uk
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with undefined - http://www.enigmail.net/

iEYEARECAAYFAlEBXoUACgkQIsyKE/d21hneGwCfXdB9s7uUHdW3/Xcp9mzTqjj/
c48An0pQ8/KELjZlajCzynJGhBOO5dGC
=KEhM
-----END PGP SIGNATURE-----


More information about the Rtir mailing list