-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Am 01.03.2011 09:50, schrieb Jensen, Peter:
> Recently i have had one of my boxes attacked with a ddos attack. It was > all coming from 1 ip address so I made the rule : paradoxon! If it's all coming from on 1 IP, it is not a *Distributed* Denail of Service Attack (DDOS), but rather a DOS. And if a single Computer can freak the hell out of you, you've gut a much bigger problem than a firewall rule. > DROP net:<ip> $FW ANY > Why specifying "ANY" for port? Laeaving it empty would be your desired solution. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iQEcBAEBAgAGBQJNbL/RAAoJEESzYGUfVKgiQXcH/jjM5j86+8ldvwaDep8qfwbm uCuXs9IRKWNA5quBmVpBRkDsATfkY4mm2aEHIOcvdZDgfEFKDAV3jmuDHHNG8RtA FQcca078cntkxMf4qwA6zEPHXpJw3secJu4oL6jCF0IjC9bBxqF5H+UVXND/ykPb x+7BSprvjHSOKt8LSRdpSnNCfavm40fsljJiSybYgtRrq9s4r+ZMq4DJVLp1Nx/Y 1GI1PBh0HDMftYG5UZyRGqoIfOyWBpyHfiLstEoR1TCBPJYqyzsO/SBRv+ljX5GB FMB2hLURSjTb+J3F9QfAnpbqfjsfdZVWTCZdSoH/4zjwGjFDtVYsk05wsus12c0= =mABh -----END PGP SIGNATURE----- ------------------------------------------------------------------------------ Free Software Download: Index, Search & Analyze Logs and other IT data in Real-Time with Splunk. Collect, index and harness all the fast moving IT data generated by your applications, servers and devices whether physical, virtual or in the cloud. Deliver compliance at lower cost and gain new business insights. http://p.sf.net/sfu/splunk-dev2dev _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
