-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
 
it should look something like this:

http://www.netsecdb.de/index.php?q=node/996

question: can i merge aliases with upload of xml-config?

I would like to let the rulesets unchanged and only exchange dedicated
aliases in firewalls.

headers and footers of example xml dummy are still missing.

regards,

Claus

Glenn Kelley schrieb:
> Claus
>
> Awesome...
>
> Now I guess I need to figure out how to get that imported... But
> this is exactly what I am looking for...
>
> I am thinking a few little things would help - but thats a great
> place to start !
>
> Glenn
>
> On Sep 23, 2008, at 6:40 PM, Claus Marxmeier wrote:
>
> i have complete ripe <http://www.ripe.net/>, apnic
> <http://www.apnic.net/>, jpnic <http://www.jpnic.net/>, cnnic
> <http://www.cnnic.net/en/index/index.htm> /in netsecdb.de database
> /
>
> arin <http://www.arin.net/>, lacnic <http://www.lacnic.net/>,
> afrinic <http://www.afrinic.net/>, nicbr <http://www.nic.br/>,
> krnic <http://www.krnic.net/english/> /import, when needed
>
> current stats:
>
> /
>
>
> Database STATS
>
> (refreshed every 30 minutes)
>
> Status of: 2008-09-24 00:12:00
>
>
> known nets:    3362078 bgp-routes:    5197010 tor exits:    829
> open proxies:    574 ad-trackers:    2130 spammer nets:    44166
> spamlink dests:    209 smtp/s nets blocked:    43764 hacker-nets:
> 673 bot-servers:    74 web-spammer:    653 spyware:    1264
> customer-nets:    1092
>
>
> I do not need to look up things any more :)
>
> Every 30 we currently generate:
>
> * hosts.deny files for plesk/qmail/xinetd * evil-client.cidr for
> postfix, * exim4_local_host_blacklist for exim4.x, *
> .htaccess-files for apache, * iptables-scripts for debian/SuSE and
> * cmdlets for use with Microsoft Exchange Server7 Series
>
> and in addition for our 2 pfsenses alias-xmls. Rulesets are fixed -
> only aliases extend/change.
>
> Just provide a template and i would suggest
> http://www.netsecdb.de/index.php?q=node/969 for source of static
> blocking by firewall.
>
> webserver and mta already have config files for blocking.
>
> regards,
>
> Claus
>
>
> Paul Mansfield schrieb:
>> Claus Marxmeier wrote:
>>> already doing that for hacker networks and spamlinkdests with 2
>>>  embedded pfsense from database in netsecdb.de
>
>>> to use /8 would be a little bit tooo cruel, wouldn't it?
>
>> better yet, just look up the IP in apnic and if it's there, deny
>> it (and cache) :-)
>
>> ---------------------------------------------------------------------
>>  To unsubscribe, e-mail: [EMAIL PROTECTED] For
>> additional commands, e-mail: [EMAIL PROTECTED]
>
>
>
>>
<claus.vcf>---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
<mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: [EMAIL PROTECTED]
<mailto:[EMAIL PROTECTED]>

- --
Claus Marxmeier

Hausanschrift: 
Johann-Kierspel-Straße 5
51491 Overath - Immekeppel
[EMAIL PROTECTED]
http://www.marxmeier.de
Phone +49 - 2204 - 305940
Mobil +49 - 172 - 5144659



___________________________________________________________________________________________________

This computer is protected by netsecurity-database from www.netsecdb.de
___________________________________________________________________________________________________

Hinweis: Die vorliegende E-Mail enthält möglicherweise vertrauliche Daten.
Falls Ihr Name nicht in der Liste der Adressaten erscheint, beachten
Sie den Inhalt der E-Mail zunächst nicht weiter, öffnen Sie keine
Dateianhänge
und wenden Sie sich umgehend an den Absender [EMAIL PROTECTED]


Sicherheitserklärung:

Der Inhalt dieser E-Mail ist ausschliesslich fuer den bezeichneten
Adressaten bestimmt.
Wenn Sie nicht der vorgesehene Adressat dieser E-Mail oder dessen
Vertreter sein sollten,
so beachten Sie bitte, dass jede Form der Kenntnisnahme,
Veroeffentlichung, Vervielfaeltigung
oder Weitergabe des Inhalts dieser E-Mail unzulaessig ist. Ich bitte
Sie, sich in diesem Fall
mit dem Absender der E-Mail in Verbindung zu setzen. Ich moechte Sie
ausserdem darauf hinweisen,
dass die Kommunikation per E-Mail ueber das Internet unsicher ist, da
fuer unberechtigte Dritte
grundsaetzlich die Moeglichkeit der Kenntnisnahme und Manipulation
besteht - auch wenn diese Nachricht
durch einen Schlüssel signiert wurde.

This message may contain confidential and/or privileged information.
If you
are not the intended recipient or have received this message in error
please notify the sender immediately and delete this message. Any
unauthorized copying, disclosure or distribution of the material contained
in this message is strictly forbidden.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
 
iD8DBQFI2n8IUIsBFYVeBxARAmkDAKCmkH17NFNr2WT1Epqr+canmLO4ogCfVw3E
sLpPLJ5YWPefNjSrjE/tz88=
=d1Fl
-----END PGP SIGNATURE-----

begin:vcard
fn:Claus Marxmeier
n:Marxmeier;Claus
adr:;;Johann-Kierspel-Strasse 5;Overath-Immekeppel;NRW;51491;Deutschland
email;internet:[EMAIL PROTECTED]
tel;home:+49-2204-917365
tel;cell:+49-172-5144659
x-mozilla-html:FALSE
url:http://ww.marxmeier.de
version:2.1
end:vcard


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to