Importing into rc.firewal rules 
    Poul-Henning Kamp 
    phk at phk.freebsd.dk
       
    Sat Nov 20 12:09:07 PST 2004
    
    
  
In message <20041120133048.N7533 at zoraida.natserv.net>, Francisco Reyes writes:
>I have a grown list of IPs that I am "deny ip from ###.### to any".
>Infected machines, hackers, etc..
If the list is long it may be almost as good, if not better, to use
blackhole routes for it.
-- 
Poul-Henning Kamp       | UNIX since Zilog Zeus 3.20
phk at FreeBSD.ORG         | TCP/IP since RFC 956
FreeBSD committer       | BSD since 4.3-tahoe    
Never attribute to malice what can adequately be explained by incompetence.
    
    
More information about the freebsd-security
mailing list