On Jan 30, 2012, at 1:29 PM, Michael Kress wrote:

> Hi,
> 
> I've recently blocked a bunch of IP addresses from a country with a red 
> flag, one big golden star in the top left corner and 4 smaller stars 
> next to it, building the shape of a semi circle.
> Many rules in /etc/shorewall/blacklist are valid and effective, like e.g.
> 208.115.192.0/18
> 216.245.192.0/19
> 221.200.0.0/14
> I can see blacklist logs in syslog.
> 
> But I have one rule that doesn't block requests:
> 58.208.0.0/12
> 
> I have for sure restarted shorewall (using Shorewall-4.4.11.2), but I 
> still get port scans and http requests from
> 58.218.199.227


Where are you seeing those requests? Can you show us an example?

-Tom

Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________




------------------------------------------------------------------------------
Try before you buy = See our experts in action!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-dev2
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to