From owner-freebsd-questions@FreeBSD.ORG Thu Mar 3 19:11:47 2011 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id BD8C6106566B for ; Thu, 3 Mar 2011 19:11:47 +0000 (UTC) (envelope-from frank@esperance-linux.co.uk) Received: from asmtp2.iomartmail.com (asmtp2.iomartmail.com [62.128.201.249]) by mx1.freebsd.org (Postfix) with ESMTP id 4F3EF8FC13 for ; Thu, 3 Mar 2011 19:11:46 +0000 (UTC) Received: from asmtp2.iomartmail.com (localhost.localdomain [127.0.0.1]) by asmtp2.iomartmail.com (8.13.8/8.13.8) with ESMTP id p23JBiQF030391; Thu, 3 Mar 2011 19:11:44 GMT Received: from orange.esperance-linux.co.uk (80-45-152-196.static.dsl.as9105.com [80.45.152.196]) (authenticated bits=0) by asmtp2.iomartmail.com (8.13.8/8.13.8) with ESMTP id p23JBhFf030382; Thu, 3 Mar 2011 19:11:43 GMT Received: by orange.esperance-linux.co.uk (Postfix, from userid 1001) id 2CBC333C3D; Thu, 3 Mar 2011 19:11:43 +0000 (GMT) Date: Thu, 3 Mar 2011 19:11:43 +0000 From: Frank Shute To: Jorge Biquez Message-ID: <20110303191143.GA61384@orange.esperance-linux.co.uk> References: <3382016411-764985335@intranet.com.mx> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="ReaqsoxgOBHFXBhH" Content-Disposition: inline In-Reply-To: <3382016411-764985335@intranet.com.mx> User-Agent: Mutt/1.4.2.3i X-Face: *}~{PHnDTzvXPe'wl_-f%!@+r5; VLhb':*DsX%wEOPg\fDrXWQJf|2\,92"DdS%63t*BHDyQ|OWo@Gfjcd72eaN!4%NE{0]p)ihQ1MyFNtWL X-Operating-System: FreeBSD 8.2-RC2 amd64 X-Organisation: 'shute.org.uk' Cc: freebsd-questions@freebsd.org Subject: Re: Simplest way to deny access to a class C X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Frank Shute List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 03 Mar 2011 19:11:47 -0000 --ReaqsoxgOBHFXBhH Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Thu, Mar 03, 2011 at 10:59:59AM -0600, Jorge Biquez wrote: > > Hello all. >=20 > I am sorry in advance if this question sounds too stupid. >=20 > I have a small server for personal use of webpages running: >=20 > 7.3-PRERELEASE FreeBSD 7.3-PRERELEASE #0 >=20 > it is working fine , no problem very stable. >=20 > I just need to block some IP class C address that are always trying=20 > to "discover" directories or applications under the web server. They=20 > do not do and can not do anything since this server has nothing=20 > installed but i am tired of seeing in the logs all the intents they=20 > do every 2-3 seconds. >=20 > I have not installed any kind of firewall yet. > What do you think is the best way to accomplish this task? If=20 > possible the easiest one. I do not want to do anything else but just=20 > bloc IP's, at this moment at least. >=20 > Thanks in advance. >=20 > Jorge Biquez >=20 I'm assuming you're running Apache, in which case you can block addresses using .htaccess http://www.webmasterworld.com/apache/3118159.htm Regards, --=20 Frank Contact info: http://www.shute.org.uk/misc/contact.html --ReaqsoxgOBHFXBhH Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (FreeBSD) iEYEARECAAYFAk1v5+4ACgkQHduKvUAgeK6/VwCaAyHQAGKQxoixqClEJmsaqqtg zQwAoIp+Bh1DmgalA7mbODby/bNdcSQt =dxPE -----END PGP SIGNATURE----- --ReaqsoxgOBHFXBhH--