On Wed, 2003-10-15 at 15:50, lrnobs wrote: > If I put all these foreign countries addresses in iptables rules would there > be a big performance hit? > > Is there a different way to do it? Follow Michael's suggestions. Patch, patch, patch. Only run those services which are vitally necessary, and run tcp wrappers where feasible. Your idea would all be for naught, considering how easy it is for intruders to spoof. -- Jason Dixon, RHCE DixonGroup Consulting http://www.dixongroup.net -- redhat-list mailing list unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe https://www.redhat.com/mailman/listinfo/redhat-list