From owner-freebsd-questions@FreeBSD.ORG Thu Mar 3 17:08:33 2011 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id DB8ED1065675 for ; Thu, 3 Mar 2011 17:08:33 +0000 (UTC) (envelope-from Ggatten@waddell.com) Received: from mailhost1.waddell.com (mailhost1.waddell.com [67.130.252.46]) by mx1.freebsd.org (Postfix) with ESMTP id A778B8FC13 for ; Thu, 3 Mar 2011 17:08:33 +0000 (UTC) Received: from emlpfilt2.waddell.com (emlpfilt2.waddell.com [10.1.10.30]) by mailhost1.waddell.com (Postfix) with ESMTP id 1AFEE6139C; Thu, 3 Mar 2011 11:08:33 -0600 (CST) Received: from emlpfilt2.waddell.com (localhost [127.0.0.1]) by localhost (Postfix) with SMTP id 0D5F92F8003; Thu, 3 Mar 2011 11:08:33 -0600 (CST) Received: from WADPHTCAS0.waddell.com (wadphtcas0.waddell.com [192.168.203.229]) by emlpfilt2.waddell.com (Postfix) with ESMTP id 076FD2F8002; Thu, 3 Mar 2011 11:08:33 -0600 (CST) Received: from WADPMBXV0.waddell.com ([169.254.1.145]) by WADPHTCAS0.waddell.com ([192.168.203.229]) with mapi; Thu, 3 Mar 2011 11:08:32 -0600 From: Gary Gatten To: "'jbiquez@intranet.com.mx'" , "'freebsd-questions@freebsd.org'" Date: Thu, 3 Mar 2011 11:08:32 -0600 Thread-Topic: Simplest way to deny access to a class C Thread-Index: AcvZxNbYlGT4Q2oVTXaseQDIKR6eDQAAMkpy Message-ID: <24110_1299172113_4D6FCB11_24110_299_1_D9B37353831173459FDAA836D3B43499BD354A31@WADPMBXV0.waddell.com> In-Reply-To: <3382016411-764985335@intranet.com.mx> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: Subject: Re: Simplest way to deny access to a class C X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 03 Mar 2011 17:08:33 -0000 Adding null routes to the address space in question will prevent comms, but= it won't stop traffic getting to you and then perhaps being logged. Some sort of firewall with a policy that denies them without logging? ----- Original Message ----- From: Jorge Biquez [mailto:jbiquez@intranet.com.mx] Sent: Thursday, March 03, 2011 10:59 AM To: freebsd-questions@freebsd.org Subject: Simplest way to deny access to a class C Hello all. I am sorry in advance if this question sounds too stupid. I have a small server for personal use of webpages running: 7.3-PRERELEASE FreeBSD 7.3-PRERELEASE #0 it is working fine , no problem very stable. I just need to block some IP class C address that are always trying=20 to "discover" directories or applications under the web server. They=20 do not do and can not do anything since this server has nothing=20 installed but i am tired of seeing in the logs all the intents they=20 do every 2-3 seconds. I have not installed any kind of firewall yet. What do you think is the best way to accomplish this task? If=20 possible the easiest one. I do not want to do anything else but just=20 bloc IP's, at this moment at least. Thanks in advance. Jorge Biquez _______________________________________________ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"
"This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system."