Re: [Cerowrt-devel] router hardening

2016-01-19 Thread Alan Jenkins
On 18/01/2016, Dave Täht wrote: > One of my issues with blindly applying techniques to block certain IPs > is trusting the sources of the data - many people have ended up on a > blocklist that shouldn't have. > > That said, ipset is so effective and so scalable, that perhaps deploying > this by de

[Cerowrt-devel] router hardening

2016-01-18 Thread Dave Täht
One of my issues with blindly applying techniques to block certain IPs is trusting the sources of the data - many people have ended up on a blocklist that shouldn't have. That said, ipset is so effective and so scalable, that perhaps deploying this by default http://www.linuxjournal.com/content/s