From owner-freebsd-questions Mon Feb 19 13:44:41 2001 Delivered-To: freebsd-questions@freebsd.org Received: from mail-gw.wamnet.com (mail-gw.wamnet.com [208.50.249.20]) by hub.freebsd.org (Postfix) with ESMTP id 448A537B401 for ; Mon, 19 Feb 2001 13:44:38 -0800 (PST) Received: from ndm.wamnet.com([172.17.38.2]) (2131 bytes) by mail-gw.wamnet.com via sendmail with P:esmtp/R:inet_hosts/T:smtp (sender: ) id for ; Mon, 19 Feb 2001 15:44:31 -0600 (CST) (Smail-3.2.0.104 1998-Nov-20 #1 built 1998-Dec-7) Received: from ds.cops.wamnet.com (ds.cops.wamnet.com [172.17.31.2]) by ndm.wamnet.com (8.9.1a/8.9.1) with ESMTP id PAA4444103; Mon, 19 Feb 2001 15:44:31 -0600 (CST) Received: from y.cops.wamnet.com (y.cops.wamnet.com [172.17.31.43]) by ds.cops.wamnet.com (980427.SGI.8.8.8/970903.SGI.AUTOCF) via SMTP id PAA63160; Mon, 19 Feb 2001 15:44:30 -0600 (CST) Date: Mon, 19 Feb 2001 15:44:30 -0600 (CST) From: Lee J Carmichael X-Sender: lcarmich@y.cops.wamnet.com To: "Gerald T. Freymann" Cc: freebsd-questions@FreeBSD.ORG Subject: Re: Blocking access to a machine In-Reply-To: <013001c09aad$71024dd0$0f10a7d1@phantom> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Hello Gerald, You could just blackhole the route with something like: route add -blackhole pD4B88246.dip.t-dialin.net localhost This would stop routing back to them... We use this quite a bit. This assumes that 'pD4B88246.dip.t-dialin.net' will resolve locally. Good luck, -------- Lee Carmichael WAM!NET Inc. System Engineer 655 Lone Oak Rd Building E 651-256-5292 Eagan, MN 55121 On Mon, 19 Feb 2001, Gerald T. Freymann wrote: > Here's a question.. > > Running FreeBSD 4.2-Release. I've noticed in our /var/log/messages file a > number of repeated attempts at anonymous FTP (like 100 in very very rapid > succession). > > I email abuse@domain with the info and hope they culprit gets hit over the > wrist with a ruler. > > Is there a way to block access by that person? > > For instance... > > pD4B88246.dip.t-dialin.net > > tried to Anon FTP in a hundred times. Is there a something I can do on that > FreeBSD machine to say completely ignore any further requests from > pD4B88246.dip.t-dialin.net? > > -Gerry > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message