On Fri, Dec 29, 2000 at 01:12:53AM +0800, Chris Dowling wrote:
> ... then you can filter those ip's out (although that would be
> a mamoth task with ipchains). ...

Actually, pretty trivial.  In my ipchains script, I call:

    # Refuse any connection from problem sites
    if [ -f /etc/rc.d/rc.firewall.blocked ]; then
        . /etc/rc.d/rc.firewall.blocked
    fi

Then I have a script that I call--it could be automated, but I'm just as
happy scanning what goes on--that inserts an IP address, the port(s) they
tried to hit, and the date/time in that file.  (Anyone wants it, sure.  It
took maybe 5 minutes to hammer out...)

Cheers,
-- 
        Dave Ihnat
        [EMAIL PROTECTED]



_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to