[Info-vax] Anti-virus ?

cao...@pitbulluk.org caoimhe at pitbulluk.org
Tue Aug 15 03:12:34 EDT 2023


Take a look at Spamhaus' DROPlist.
It's two lists of CIDRs taken over by.... well.... read the blurb yourself.
They are refreshed in my router's blocking rulesets on a regular basis and, at least according to logs, have cut down the number of would-be attacks,
especially what look like brute-force type, by about 60%

K

On Tuesday, August 15, 2023 at 4:04:27 AM UTC+1, Dave Froble wrote:
> On 8/14/2023 10:10 PM, bill wrote: 
> > On 8/14/2023 7:04 PM, Johnny Billquist wrote: 
> >> 
> >> However, yes, there is a "defence" mechanism. If the system detects a lot of 
> >> "bad" traffic from an address, it will eventually get blocked, and the block 
> >> will only drop once there is no traffic from that address for a certain amount 
> >> of time. And of course, if they start abusing again, they will get blocked again. 
> > 
> > Why would you ever unblock it? 
> > 
> > bill 
> > 
> >
> One of the major problems, at least in my mind, of blocking is that there may 
> come a time when traffic from some source might be something you actually want 
> to receive. Doubtful? Likely. But, never say never. 
> 
> I think Johnny's practice is great, block when necessary, but, leave your 
> options open. Like he writes, when needed to block, it happens. 
> 
> Almost thinking about asking for his design ... maybe not, I've grown lazy.
> -- 
> David Froble Tel: 724-529-0450 
> Dave Froble Enterprises, Inc. E-Mail: da... at tsoft-inc.com 
> DFE Ultralights, Inc. 
> 170 Grimplin Road 
> Vanderbilt, PA 15486



More information about the Info-vax mailing list