On Tue, Jul 01, 2003 at 05:57:27PM +0200, Tomasz Papszun wrote: > On Mon, 30 Jun 2003 at 22:39:15 -0400, Matt Zimmerman wrote: > > Not really a good idea. Consider what happens when someone forges the IP > > addresses. > > One can predefine trusted or other very important IP addresses which > cannot be blocked. > In fact, such an utility exists and is present in Debian Woody: > fwlogwatch.
Which ones are important? For example, one could forge packets from millions of random IP addresses, popular web sites, etc. and easily DoS such a system. -- - mdz
