denying spam hosts ssh access - good idea?

Anton Shterenlikht mexas at bristol.ac.uk
Wed Jan 13 10:06:20 UTC 2010


On Tue, Jan 12, 2010 at 11:36:11PM +0100, Erik Norgaard wrote:
> Anton Shterenlikht wrote:
> 
> >> - why not let your firewall do the blocking? If your blocking is IP 
> >> based that's the place to block.
> > 
> > I'm already under the University firewall. Only port 22 is let through.
> > But even that filles my logs.
> 
> What I meant was that if you want to block IPs or ranges of IPs then a 
> firewall is the place to block, it's efficient and simple.
> 
> If your university firewall doesn't satisfy you there is nothing that 
> hinders you from configuring firewall rules on your server.

thank you, I get it now.

anton

-- 
Anton Shterenlikht
Room 2.6, Queen's Building
Mech Eng Dept
Bristol University
University Walk, Bristol BS8 1TR, UK
Tel: +44 (0)117 331 5944
Fax: +44 (0)117 929 4423


More information about the freebsd-questions mailing list