From owner-freebsd-questions@FreeBSD.ORG  Sat Mar 29 06:25:20 2003
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 91B0937B401
	for <freebsd-questions@freebsd.org>;
	Sat, 29 Mar 2003 06:25:20 -0800 (PST)
Received: from sage-one.net (adsl-65-71-135-137.dsl.crchtx.swbell.net
	[65.71.135.137])
	by mx1.FreeBSD.org (Postfix) with ESMTP id C225343F93
	for <freebsd-questions@freebsd.org>;
	Sat, 29 Mar 2003 06:25:19 -0800 (PST)
	(envelope-from jackstone@sage-one.net)
Received: from sagea (adsl-65-68-247-73.dsl.crchtx.swbell.net [65.68.247.73])
	by sage-one.net (8.12.6/8.12.6) with SMTP id h2TEPGLl053311
	for <freebsd-questions@freebsd.org>;
	Sat, 29 Mar 2003 08:25:17 -0600 (CST)
	(envelope-from jackstone@sage-one.net)
Message-Id: <3.0.5.32.20030329082518.0142ed68@sage-one.net>
X-Sender: jackstone@sage-one.net
X-Mailer: QUALCOMM Windows Eudora Pro Version 3.0.5 (32)
Date: Sat, 29 Mar 2003 08:25:18 -0600
To: freebsd-questions@freebsd.org
From: "Jack L. Stone" <jackstone@sage-one.net>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
X-Spam-Status: No, hits=0.5 required=4.5
	tests=SPAM_PHRASE_01_02
	version=2.44-sageamerules_v1
Subject: Annoying RedAlert.com activity
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 29 Mar 2003 14:25:24 -0000

This is semi-OT, but is a FBSD firewall question.

Every day, I see this in the logs:
65.194.51.136 - - [29/Mar/2003:00:26:47 -0600] "HEAD / HTTP/1.0" 200 0 "-"
"RedAlert.com"
65.194.51.133 - - [29/Mar/2003:00:26:47 -0600] "HEAD / HTTP/1.0" 200 0 "-"
"RedAlert.com"
65.194.51.131 - - [29/Mar/2003:00:26:49 -0600] "HEAD / HTTP/1.0" 200 0 "-"
"RedAlert.com"
65.194.51.135 - - [29/Mar/2003:00:26:50 -0600] "HEAD / HTTP/1.0" 200 0 "-"
"RedAlert.com"
65.194.51.132 - - [29/Mar/2003:00:26:52 -0600] "HEAD / HTTP/1.0" 200 0 "-"
"RedAlert.com"
65.194.51.134 - - [29/Mar/2003:00:26:55 -0600] "HEAD / HTTP/1.0" 200 0 "-"
"RedAlert.com"
65.194.51.155 - - [29/Mar/2003:00:28:24 -0600] "HEAD / HTTP/1.0" 200 0 "-"
"RedAlert.com"
65.194.51.156 - - [29/Mar/2003:00:29:14 -0600] "HEAD / HTTP/1.0" 200 0 "-"
"RedAlert.com"
65.194.51.137 - - [29/Mar/2003:00:30:45 -0600] "HEAD / HTTP/1.0" 200 0 "-"
"RedAlert.com"
65.194.51.154 - - [29/Mar/2003:00:34:13 -0600] "HEAD / HTTP/1.0" 200 0 "-"
"RedAlert.com"
65.194.51.152 - - [29/Mar/2003:00:34:21 -0600] "HEAD / HTTP/1.0" 200 0 "-"
"RedAlert.com"
65.194.51.151 - - [29/Mar/2003:00:34:50 -0600] "HEAD / HTTP/1.0" 200 0 "-"
"RedAlert.com"
65.194.51.165 - - [29/Mar/2003:00:34:52 -0600] "HEAD / HTTP/1.0" 200 0 "-"
"RedAlert.com"

Question:
At the "redalert.com" web site, they claim to be a server monitoring
service, but I've never signed up for the service and don't want this daily
waste of BW that appears on all of my web servers. It is annoying and I
would like to block their network via the firewall.

Based on the above, what would be the best choice of how to block the network:
65.194.51.?/?

Thanks for any suggestions....

Best regards,
Jack L. Stone,
Administrator

SageOne Net
http://www.sage-one.net
jackstone@sage-one.net