Dr.Web LookupD

The Dr.Web LookupD component is designed to refer to external sources (text files, relational databases, directory services, supporting the LDAP protocol interaction) to retrieve data by using the LDAP protocol. The received data is used in rules according to which network connections are scanned (for example, to check the user’s authorization). This data is also used to block access to URLs if certain criteria are met.

In the component settings, you can specify parameters for connection to several data sources. Dr.Web LookupD connects to the required data source only upon receiving a data request from any of the Dr.Web for UNIX Mail Servers components.

Dr.Web LookupD supports referrals to the following data sources:

Text files (in the AllMatch, the Mask, the Regex, the Cidr modes);

Relational databases (MySQL, PostgreSQL, SQLite);

Redis data storages;

Directory services (Active Directory and others which provide access via LDAP, for example, OpenLDAP).

Sharing of data via the LDAP protocol can be performed either over an open channel or over a protected one, applying SSL/TLS. To use a secure connection, it is required to provide Dr.Web LookupD with an appropriate SSL certificate and key. If you need to generate SSL keys and certificates, you can use the openssl utility. An example of how to use the openssl utility to generate a certificate and a private key is given in the Appendix E. Generating SSL certificates section.

 

Details:

Operating Principles

Command-Line Arguments

Configuration Parameters