Re: Favorite way to ban an IP from your webserver?

["eric c-7" <user=1564@nabble.blu.org>]

 Ben Eisenbraun wrote: 
> I guess I can sum up my opinion like this: if the scan that's occuring 
> _right now_ is affecting service, then yes, block it via firewall or 
> null route or what have you.  But if you're just looking at logs after 
> the fact, I think your time and energy is better spent learning about 
> and configuring chroots, jails, lowering privileges for daemons, 
> tripwire/aide, selinux, etc. 

Ha, I've been reading logs too much and have not seen the sun. 

Last I read up on this stuff (~3 years ago) tripwire (free) was hardly 
updated, aide was just a baby and nessus was the cats meow.  Is the 
situation still the same? 

> all is chaos under heaven, and the situation is excellent. 
>                                               <mao zedong 

Love the quote! 

Thanks for the advice, 
Eric C. 

-- 
This message has been scanned for viruses and 
dangerous content by MailScanner, and is 
believed to be clean. 

_______________________________________________ 
Discuss mailing list 
[hidden email] 
http://lists.blu.org/mailman/listinfo/discuss