Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 19 Feb 2001 23:19:38 +0100
From:      Christoph Sold <so@server.i-clue.de>
To:        Lee J Carmichael <lcarmich@wamnet.com>
Cc:        questions@freebsd.org
Subject:   Re: Blocking access to a machine
Message-ID:  <3A919BFA.C3652EFE@i-clue.de>
References:  <Pine.SGI.3.96.1010219154051.25108g-100000@y.cops.wamnet.com>

next in thread | previous in thread | raw e-mail | index | archive | help


Lee J Carmichael schrieb:
> 
> Hello Gerald,
> 
> You could just blackhole the route with something like:
> 
> route add -blackhole pD4B88246.dip.t-dialin.net localhost
> 
> This would stop routing back to them... We use this quite a bit.
> 
> This assumes that 'pD4B88246.dip.t-dialin.net' will resolve locally.

It will, and it won't make you happy.  t-dialin.net ist the dialin pool
of German Telekom. Thousands of (ADSL-, ISDN-, Modem-) lines, waiting
for script kiddies to surf on. Think of 'em like of AOL. Blocking one
port won't help, blocking them all isn't a possibility.

HTH
-Christoph Sold


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3A919BFA.C3652EFE>