What is the difference between * and ALL?

Discussions about the Application Boundaries Enforcer (ABE) module
Guest

What is the difference between * and ALL?

Post by Guest »

abe_rules.pdf says this:
ALL

special token matching any URI (it can be omitted)

^https?://some\.site\.com/.* regular expression
*.some.site.com (matches anything.some.site.com but not some.site.com) or

.some.site.com (matches anything.some.site.com and some.site.com)
glob expression; a glob expression starting with “.” will match both the subdomains having it as a suffix and the domain stripped of the leading dot.
But the pdf does not mention the use of * like this:
Site *
Accept from SELF++
Anonymize

Site ALL
Accept from SELF++
Anon
Or this ALL:
Site thissite.com
Accept ALL from thissite.com
Deny ALL

# shorthand it
Site thissite.com
Accept from SELF
Deny
I`ve c&p the examples from this board. Maybe they have incorrect syntax. The board is full of - in real live - useless examples :).

Again, my question is: What are the differences between ALL and *?

By the way, what are here the differences (DENY)

# Site thissite.com
Accept from SELF
Deny

# ?
Site thissite.com
Accept from SELF
Deny INC
Deny
# ?
Site thissite.com
Accept from SELF
Deny INC from ALL
Deny
[/quote]

[/quote]

?
Mozilla/5.0 (X11; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0
barbaz
Senior Member
Posts: 10841
Joined: Sat Aug 03, 2013 5:45 pm

Re: What is the difference between * and ALL?

Post by barbaz »

* is the same as ALL. The ALL you've added are implied when not there.
Guest wrote: The board is full of - in real live - useless examples
Thanks :roll:
I suggest that you're using the wrong tool for whatever you're trying to do
Guest wrote:By the way, what are here the differences (DENY)
The added Deny INC is a work-around for a bug in the notification.
*Always* check the changelogs BEFORE updating that important software!
-
fatboy
Senior Member
Posts: 82
Joined: Fri Jul 25, 2014 6:56 am
Contact:

Re: What is the difference between * and ALL?

Post by fatboy »

@barbaz

1. In the message you write:
Deny INC(SCRIPT, OBJ, FONT, XHR, MEDIA)
Sandbox

Why isn't it?
Deny INC(FONT) #display content
Sandbox #active content
It is also "a work-around for a bug in the notification"?


2.Sandbox applies only to the main/toplevel sites?
Site .youtube.com
Sandbox from ^https?://(?!www\.youtube\.com)
works

Site .ytimg.com
Sandbox from .youtube.com
does not work

3.
Site ALL
Deny INC(PING)
Maybe the replacement Options-Advanced-Trusted/Untrusted "Forbid a ping..."?
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 SM/2.38 NS/2.9.0.12
Post Reply