Re: Use iptables to block all non-US ssh traffic
From: Chris Barnes (chris_at_txbarnes.com)
Date: 09/19/05
- Next message: Robert Glueck: "Am I infected with Back Orifice 2K?"
- Previous message: matt_left_coast: "Re: Use iptables to block all non-US ssh traffic"
- In reply to: matt_left_coast: "Re: Use iptables to block all non-US ssh traffic"
- Next in thread: matt_left_coast: "Re: Use iptables to block all non-US ssh traffic"
- Reply: matt_left_coast: "Re: Use iptables to block all non-US ssh traffic"
- Reply: Moe Trin: "Re: Use iptables to block all non-US ssh traffic"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 19 Sep 2005 11:25:59 -0500
matt_left_coast <not@chance.org> wrote:
> Haven't you figured out there is no such list?
There is a HUGE world of difference between "technically no list" and
the "reality of what we need".
Frankly, I wouldn't care a wit if some of the blocked addresses are used
in the US. What matters is where *MY USERS* might be coming from. That
is a finite number and even for "world traveler physics professors", the
list isn't all that exhaustive.
cox-internet.com
verizon.net
(and these only because they are the 2 high speed internent providers in
our little town)
The rest all going to be predominately either US .edu sites, or US gov
research facilities (fermi lab, etc).
If I end up blocking some local isp in Caper, WY, that's probably a good
thing.
-- + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Chris Barnes AOL IM: CNBarnes chris@txbarnes.com Yahoo IM: chrisnbarnes You always have freedom of choice, but you never have freedom of consequence.
- Next message: Robert Glueck: "Am I infected with Back Orifice 2K?"
- Previous message: matt_left_coast: "Re: Use iptables to block all non-US ssh traffic"
- In reply to: matt_left_coast: "Re: Use iptables to block all non-US ssh traffic"
- Next in thread: matt_left_coast: "Re: Use iptables to block all non-US ssh traffic"
- Reply: matt_left_coast: "Re: Use iptables to block all non-US ssh traffic"
- Reply: Moe Trin: "Re: Use iptables to block all non-US ssh traffic"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|