What is the difference between * and ALL?

Discussions about the Application Boundaries Enforcer (ABE) module
Guest

What is the difference between * and ALL?

Post by Guest » Sun Aug 07, 2016 8:48 am

abe_rules.pdf says this:

ALL

special token matching any URI (it can be omitted)

^https?://some\.site\.com/.* regular expression
*.some.site.com (matches anything.some.site.com but not some.site.com) or

.some.site.com (matches anything.some.site.com and some.site.com)
glob expression; a glob expression starting with “.” will match both the subdomains having it as a suffix and the domain stripped of the leading dot.


But the pdf does not mention the use of * like this:

Site *
Accept from SELF++
Anonymize

Site ALL
Accept from SELF++
Anon


Or this ALL:

Site thissite.com
Accept ALL from thissite.com
Deny ALL

# shorthand it
Site thissite.com
Accept from SELF
Deny


I`ve c&p the examples from this board. Maybe they have incorrect syntax. The board is full of - in real live - useless examples :).

Again, my question is: What are the differences between ALL and *?

By the way, what are here the differences (DENY)


# Site thissite.com
Accept from SELF
Deny

# ?
Site thissite.com
Accept from SELF
Deny INC
Deny


# ?
Site thissite.com
Accept from SELF
Deny INC from ALL
Deny
[/quote]

[/quote]

?
Mozilla/5.0 (X11; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0

barbaz
Senior Member
Posts: 9781
Joined: Sat Aug 03, 2013 5:45 pm

Re: What is the difference between * and ALL?

Post by barbaz » Sun Aug 07, 2016 4:47 pm

* is the same as ALL. The ALL you've added are implied when not there.

Guest wrote: The board is full of - in real live - useless examples

Thanks :roll:
I suggest that you're using the wrong tool for whatever you're trying to do

Guest wrote:By the way, what are here the differences (DENY)

The added Deny INC is a work-around for a bug in the notification.
*Always* check the changelogs BEFORE updating that important software!
-

fatboy
Senior Member
Posts: 59
Joined: Fri Jul 25, 2014 6:56 am
Contact:

Re: What is the difference between * and ALL?

Post by fatboy » Sun Aug 07, 2016 6:24 pm

@barbaz

1. In the message you write:
Deny INC(SCRIPT, OBJ, FONT, XHR, MEDIA)
Sandbox

Why isn't it?
Deny INC(FONT) #display content
Sandbox #active content
It is also "a work-around for a bug in the notification"?


2.Sandbox applies only to the main/toplevel sites?
Site .youtube.com
Sandbox from ^https?://(?!www\.youtube\.com)
works

Site .ytimg.com
Sandbox from .youtube.com
does not work

3.
Site ALL
Deny INC(PING)
Maybe the replacement Options-Advanced-Trusted/Untrusted "Forbid a ping..."?
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 SM/2.38 NS/2.9.0.12

Post Reply