LinuxSA Mailing list archives

  From: Anthony Symons <ant@sa.pracom.com.au>
  To  : <mwestern@affairs.net.au>
  Date: 21 Nov 2001 16:51:44 +1030

Re: Autoblocking

Bear in mind that a lot of people are on dynamic IPs, so that if you
block an IP for a few days then someone else dials up and gets that IP
then they wont be able to access your site for as long as they have that
IP, and you have them black listed. I'd only block for 30 mins, as most
humans should be discouraged by then :)

Ant

On Wed, 2001-11-21 at 15:34, Matthew Western wrote:
> Hi LinuxGurus,
> Is there a way in linux to detect naughty activity from the outside and
> autoblock that IP for a specified time?  say if someone port scans my box, i
> want to deny absoultly everything for a couple days for example at first,
> then if it happens again, deny for two weeks or something like that.  all
> logged etc etc.....
> anybody done that before?
> Thanks
> Matthew
> 
> -- 
> LinuxSA WWW: http://www.linuxsa.org.au/  IRC: #linuxsa on irc.linux.org.au
> To unsubscribe from the LinuxSA list:
>   mail linuxsa-request@linuxsa.org.au with "unsubscribe" as the subject
> 
-- 
Systems Administrator       
Pracom Ltd.             
+61 8 82029074 -=- +61 402 100 671 
anthony.symons@sa.pracom.com.au

PRIVILEGED - PRIVATE AND CONFIDENTIAL
This electronic mail is solely for the use of the addressee and may
contain information which is confidential or privileged.
If you receive this electronic mail in error, please delete it from
your system immediately and notify the sender by electronic mail or
using any of the above contact details.

-- 
LinuxSA WWW: http://www.linuxsa.org.au/  IRC: #linuxsa on irc.linux.org.au
To unsubscribe from the LinuxSA list:
  mail linuxsa-request@linuxsa.org.au with "unsubscribe" as the subject