IP Address blocking

[Thomas Zehetbauer]

On Wed, 2005-01-05 at 21:53 -0500, Chris Ruprecht wrote:
> Every other morning, I read the system logs from the day before and
> there are a number of break in attempts (usually 59) to root and a few
> to a slew to other accounts.

Same here, I guess you use IRC, don't you? Attack rate somewhat dropped
here after I started sending complaints to the offending IP's provider.

> I would like to know if there is any program in existence that detects
> these attempts and blocks the IP address from sending anything my way
> ever again.

Blindly blocking these IPs is probably not a good idea as this can be
easily used as a denial of service attack by sending spoofed packets.

Tom

-- 
  T h o m a s   Z e h e t b a u e r   ( TZ251 )
  PGP encrypted mail preferred - KeyID 96FFCB89
      finger thomasz at hostmaster.org for key

UNIX is user-friendly ... it's just selective about who it's friends are



-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 481 bytes
Desc: This is a digitally signed message part
Url : http://lists.fedoraproject.org/pipermail/users/attachments/20050106/7d9abfeb/attachment-0002.bin