From owner-freebsd-questions@FreeBSD.ORG  Tue Jan 12 22:36:13 2010
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 92BB31065670
	for <freebsd-questions@freebsd.org>;
	Tue, 12 Jan 2010 22:36:13 +0000 (UTC)
	(envelope-from norgaard@locolomo.org)
Received: from mail.locolomo.org (97.pool85-48-194.static.orange.es
	[85.48.194.97]) by mx1.freebsd.org (Postfix) with ESMTP id 4A7018FC0A
	for <freebsd-questions@freebsd.org>;
	Tue, 12 Jan 2010 22:36:13 +0000 (UTC)
Received: from beta.1-16-172-dyn.locolomo.org (unknown [172.16.1.127])
	by mail.locolomo.org (Postfix) with ESMTPSA id 1395E1C1A67;
	Tue, 12 Jan 2010 23:36:12 +0100 (CET)
Message-ID: <4B4CF95B.90207@locolomo.org>
Date: Tue, 12 Jan 2010 23:36:11 +0100
From: Erik Norgaard <norgaard@locolomo.org>
User-Agent: Thunderbird 2.0.0.23 (Macintosh/20090812)
MIME-Version: 1.0
To: Anton Shterenlikht <mexas@bristol.ac.uk>
References: <20100111140105.GI61025@mech-cluster241.men.bris.ac.uk>
	<4B4C43EE.6080703@locolomo.org>
	<20100112095357.GD61863@mech-cluster241.men.bris.ac.uk>
In-Reply-To: <20100112095357.GD61863@mech-cluster241.men.bris.ac.uk>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 8bit
Cc: freebsd-questions@freebsd.org
Subject: Re: denying spam hosts ssh access - good idea?
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 12 Jan 2010 22:36:13 -0000

Anton Shterenlikht wrote:

>> - why not let your firewall do the blocking? If your blocking is IP 
>> based that's the place to block.
> 
> I'm already under the University firewall. Only port 22 is let through.
> But even that filles my logs.

What I meant was that if you want to block IPs or ranges of IPs then a 
firewall is the place to block, it's efficient and simple.

If your university firewall doesn't satisfy you there is nothing that 
hinders you from configuring firewall rules on your server.

Cheers, Erik

-- 
Erik Nørgaard
Ph: +34.666334818/+34.915211157                  http://www.locolomo.org