Has anyone modified RTIR to allow Blocks to be linked to Incident Reports
instead of Incidents? If so, how?
I don't like the fact that I have to create an Incident Report and then
an Incident to create a Block. That logic is flawed. It assumes it takes
an actual incident to put a block in
Paul,
Why would you want to block an IP before a problem occurs? And how would
you know that the IP is going to be problematic before a problem occurs?
We utilize RTIR for our Abuse handling. External sites email us to
ab...@sagonet.com, which drops into RTIR's Incident Reports queue. From
-users] RTIR Blocks
Paul,
Why would you want to block an IP before a problem occurs? And how would
you know that the IP is going to be problematic before a problem occurs?
We utilize RTIR for our Abuse handling. External sites email us to
ab...@sagonet.com, which drops into RTIR's Incident
