Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 20 Nov 2004 21:09:02 +0100
From:      "Poul-Henning Kamp" <phk@phk.freebsd.dk>
To:        Francisco Reyes <lists@natserv.com>
Cc:        FreeBSD Security List <freebsd-security@freebsd.org>
Subject:   Re: Importing into rc.firewal rules 
Message-ID:  <8776.1100981342@critter.freebsd.dk>
In-Reply-To: Your message of "Sat, 20 Nov 2004 13:32:15 EST." <20041120133048.N7533@zoraida.natserv.net> 

next in thread | previous in thread | raw e-mail | index | archive | help
In message <20041120133048.N7533@zoraida.natserv.net>, Francisco Reyes writes:

>I have a grown list of IPs that I am "deny ip from ###.### to any".
>Infected machines, hackers, etc..

If the list is long it may be almost as good, if not better, to use
blackhole routes for it.

-- 
Poul-Henning Kamp       | UNIX since Zilog Zeus 3.20
phk@FreeBSD.ORG         | TCP/IP since RFC 956
FreeBSD committer       | BSD since 4.3-tahoe    
Never attribute to malice what can adequately be explained by incompetence.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?8776.1100981342>