Paul Gear wrote: > Cristian Rodriguez wrote: >> [email protected] escribió: >>> Would there be any reason to not just blacklist the entire Ukraine ISP >>> letting this out? >> Yes, blacklisting an ISP only provides a false sense of security. >> > > A better solution would be to use fail2ban and configure it to look for > those messages.
Or ignore them -- the source IP in DNS attack packets usually belongs to the victim, not the attacker... -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ OpenSolaris 2009.06 is a cutting edge operating system for enterprises looking to deploy the next generation of Solaris that includes the latest innovations from Sun and the OpenSource community. Download a copy and enjoy capabilities such as Networking, Storage and Virtualization. Go to: http://p.sf.net/sfu/opensolaris-get
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
