denying spam hosts ssh access - good idea?

Erik Norgaard norgaard at locolomo.org
Tue Jan 12 22:36:13 UTC 2010


Anton Shterenlikht wrote:

>> - why not let your firewall do the blocking? If your blocking is IP 
>> based that's the place to block.
> 
> I'm already under the University firewall. Only port 22 is let through.
> But even that filles my logs.

What I meant was that if you want to block IPs or ranges of IPs then a 
firewall is the place to block, it's efficient and simple.

If your university firewall doesn't satisfy you there is nothing that 
hinders you from configuring firewall rules on your server.

Cheers, Erik

-- 
Erik Nørgaard
Ph: +34.666334818/+34.915211157                  http://www.locolomo.org


More information about the freebsd-questions mailing list