Slashdot is powered by your submissions, so send in your scoop

 



Forgot your password?
typodupeerror
×

Comment Re:NMAP (Score 1) 205

this scales much better:
$IPTABLES -I INPUT -m set --match-set ipbl src -j DROP
$IPTABLES -I FORWARD -m set --match-set ipbl src -j DROP
$IPTABLES -I FORWARD -m set --match-set ipbl dst -j DROP
$IPTABLES -I OUTPUT -m set --match-set ipbl dst -j DROP

add an ip to ipbl set:
ipset add ipbl ${IP}

don't forget to block all ipv6 traffic if you don't need ipv6:
${IP6TABLES} -I FORWARD -i eth0 -j DROP
${IP6TABLES} -I INPUT -i eth0 -j DROP
${IP6TABLES} -I FORWARD -o eth0 -j DROP
${IP6TABLES} -I OUTPUT -o eth0 -j DROP

Comment Ain't surprised (Score 1) 125

This doesn't surprise me. I run modsecurity WAF and iptables, yes I know but iptables does the job for now, with custom rules and logging policies and it is amazing to see how many so called legitimate sites have been owned.

I used to contact site admins and participate in exchanges of offending IPs but I gave up a long time ago to run my own countermeasure system.

Boy we went a long way since the beginning with regards to that.

Slashdot Top Deals

People who go to conferences are the ones who shouldn't.

Working...