From owner-freebsd-questions@FreeBSD.ORG Fri Mar 4 02:43:14 2011 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 1E2B41065673 for ; Fri, 4 Mar 2011 02:43:14 +0000 (UTC) (envelope-from jbiquez@intranet.com.mx) Received: from intranet.com.mx (intranet.com.mx [200.33.246.7]) by mx1.freebsd.org (Postfix) with ESMTP id D74138FC12 for ; Fri, 4 Mar 2011 02:43:13 +0000 (UTC) Received: from PC2.intranet.com.mx (189.144.56.132) by intranet.com.mx with ESMTP (EIMS X 3.3.9) for ; Thu, 3 Mar 2011 20:43:49 -0600 X-Mailer: QUALCOMM Windows Eudora Version 7.1.0.9 Date: Thu, 03 Mar 2011 20:43:56 -0600 To: freebsd-questions@freebsd.org From: Jorge Biquez In-Reply-To: <11805_1299196962_4D702C22_11805_70_1_D9B37353831173459FDAA 836D3B43499BD354A48@WADPMBXV0.waddell.com> References: <3382016411-764985335@intranet.com.mx> <11805_1299196962_4D702C22_11805_70_1_D9B37353831173459FDAA836D3B43499BD354A48@WADPMBXV0.waddell.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Message-ID: <3382051429-764985639@intranet.com.mx> Subject: RE: Simplest way to deny access to a class C X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 04 Mar 2011 02:43:14 -0000 Thank you all for your time and comments. I guess that I will install a firewall, that way I can also block those Class C's from sending tons of emails to non existing accounts.... I will read the website to see the best options. Any suggestion is more than welcome. Jorge Biquez At 06:02 p.m. 03/03/2011, you wrote: >Be careful of automated responses. What if someone spoofs IP's of >legit users / customers / whatever and your automated response >blocks them? Not good. > >I thought about blocking....well, never mind - might pi$$ someone >off and attract unwanted attention... > >-----Original Message----- >From: owner-freebsd-questions@freebsd.org >[mailto:owner-freebsd-questions@freebsd.org] On Behalf Of Patrick Gibson >Sent: Thursday, March 03, 2011 5:58 PM >To: Jorge Biquez >Cc: freebsd-questions@freebsd.org >Subject: Re: Simplest way to deny access to a class C > >You might consider mod_security (/usr/ports/www/mod_security) which >can be set up to ban hosts based on behaviour or characteristics. > >Or fail2ban (/usr/ports/security/py-fail2ban) is really great, too, in >that it scans whatever logs you want, and can trigger a block in your >firewall if enough violating log entries are found within a particular >period of time. Everything is totally configurable, and there are >plenty of examples that come with it. > >Patrick > > >On Thu, Mar 3, 2011 at 8:59 AM, Jorge Biquez wrote: > > Hello all. > > > > I am sorry in advance if this question sounds too stupid. > > > > I have a small server for personal use of webpages running: > > > > 7.3-PRERELEASE FreeBSD 7.3-PRERELEASE #0 > > > > it is working fine , no problem very stable. > > > > I just need to block some IP class C address that are always trying to > > "discover" directories or applications under the web server. They do not do > > and can not do anything since this server has nothing installed but i am > > tired of seeing in the logs all the intents they do every 2-3 seconds. > > > > I have not installed any kind of firewall yet. > > What do you think is the best way to accomplish this task? If possible the > > easiest one. I do not want to do anything else but just bloc IP's, at this > > moment at least. > > > > Thanks in advance. > > > > Jorge Biquez > > > > _______________________________________________ > > freebsd-questions@freebsd.org mailing list > > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org" > > >_______________________________________________ >freebsd-questions@freebsd.org mailing list >http://lists.freebsd.org/mailman/listinfo/freebsd-questions >To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" > > > > > > >
>
>"This email is intended to be reviewed by only the intended recipient > and may contain information that is privileged and/or confidential. > If you are not the intended recipient, you are hereby notified that > any review, use, dissemination, disclosure or copying of this email > and its attachments, if any, is strictly prohibited. If you have > received this email in error, please immediately notify the sender by > return email and delete this email from your system." > > >_______________________________________________ >freebsd-questions@freebsd.org mailing list >http://lists.freebsd.org/mailman/listinfo/freebsd-questions >To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"