Re: deny cgi scanner

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, 1 Apr 2003 15:06:52 -0500, 
Stephen Frost <sfrost@xxxxxxxxxxx> wrote in message 
<20030401200652.GY18434@xxxxxxxxxxxxxx>:

> 
> # Bad guy detected!  Add his IP to the badguy list!
> iptables -A BADCHAIN -m recent --set --name badguy -j DROP # Add IP to
> list

..this also shoots down the good guys with servers on dynamic dns, 
using an old recycled-by-the-isp bad guy's ip.

-- 
..med vennlig hilsen = with Kind Regards from Arnt... ;-)
...with a number of polar bear hunters in his ancestry...
  Scenarios always come in sets of three: 
  best case, worst case, and just in case.




[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux