-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Am 01.03.2011 09:50, schrieb Jensen, Peter:

> Recently i have had one of my boxes attacked with a ddos attack. It was
> all coming from 1 ip address so I made the rule :

paradoxon!
If it's all coming from on 1 IP, it is not a *Distributed* Denail of
Service Attack (DDOS), but rather a DOS. And if a single Computer can
freak the hell out of you, you've gut a much bigger problem than a
firewall rule.

> DROP                    net:<ip>              $FW                      ANY
> 
Why specifying "ANY" for port? Laeaving it empty would be your desired
solution.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJNbL/RAAoJEESzYGUfVKgiQXcH/jjM5j86+8ldvwaDep8qfwbm
uCuXs9IRKWNA5quBmVpBRkDsATfkY4mm2aEHIOcvdZDgfEFKDAV3jmuDHHNG8RtA
FQcca078cntkxMf4qwA6zEPHXpJw3secJu4oL6jCF0IjC9bBxqF5H+UVXND/ykPb
x+7BSprvjHSOKt8LSRdpSnNCfavm40fsljJiSybYgtRrq9s4r+ZMq4DJVLp1Nx/Y
1GI1PBh0HDMftYG5UZyRGqoIfOyWBpyHfiLstEoR1TCBPJYqyzsO/SBRv+ljX5GB
FMB2hLURSjTb+J3F9QfAnpbqfjsfdZVWTCZdSoH/4zjwGjFDtVYsk05wsus12c0=
=mABh
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------
Free Software Download: Index, Search & Analyze Logs and other IT data in 
Real-Time with Splunk. Collect, index and harness all the fast moving IT data 
generated by your applications, servers and devices whether physical, virtual
or in the cloud. Deliver compliance at lower cost and gain new business 
insights. http://p.sf.net/sfu/splunk-dev2dev 
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to