[Info-vax] Anti-virus ?
cao...@pitbulluk.org
caoimhe at pitbulluk.org
Tue Aug 15 03:12:34 EDT 2023
Take a look at Spamhaus' DROPlist.
It's two lists of CIDRs taken over by.... well.... read the blurb yourself.
They are refreshed in my router's blocking rulesets on a regular basis and, at least according to logs, have cut down the number of would-be attacks,
especially what look like brute-force type, by about 60%
K
On Tuesday, August 15, 2023 at 4:04:27 AM UTC+1, Dave Froble wrote:
> On 8/14/2023 10:10 PM, bill wrote:
> > On 8/14/2023 7:04 PM, Johnny Billquist wrote:
> >>
> >> However, yes, there is a "defence" mechanism. If the system detects a lot of
> >> "bad" traffic from an address, it will eventually get blocked, and the block
> >> will only drop once there is no traffic from that address for a certain amount
> >> of time. And of course, if they start abusing again, they will get blocked again.
> >
> > Why would you ever unblock it?
> >
> > bill
> >
> >
> One of the major problems, at least in my mind, of blocking is that there may
> come a time when traffic from some source might be something you actually want
> to receive. Doubtful? Likely. But, never say never.
>
> I think Johnny's practice is great, block when necessary, but, leave your
> options open. Like he writes, when needed to block, it happens.
>
> Almost thinking about asking for his design ... maybe not, I've grown lazy.
> --
> David Froble Tel: 724-529-0450
> Dave Froble Enterprises, Inc. E-Mail: da... at tsoft-inc.com
> DFE Ultralights, Inc.
> 170 Grimplin Road
> Vanderbilt, PA 15486
More information about the Info-vax
mailing list