From: "Happli, Drew" <AHappli@xxxxxxxxxx>
Reply-To: cobalt-security@xxxxxxxxxxxxxxx
To: "'cobalt-security@xxxxxxxxxxxxxxx'" <cobalt-security@xxxxxxxxxxxxxxx>
Subject: RE: [cobalt-security] [RAQ4] Denying specific IP from DNS traffic
Date: Tue, 18 Feb 2003 10:00:55 -0500
Can someone tell me how this would be a bad thing? Last time I check Asia
includes Korea, China, and Singapore. All of which have tried to relay
spam
through a non-open server (hell they tried on a server that didn't even
have
SMTP installed!). I've been debating for years banning the whole of Asia
from my network.
Drew.
-----Original Message-----
From: Jaana Jarve [mailto:netcat@xxxxxxxxx]
Sent: Monday, February 17, 2003 6:21 AM
To: cobalt-security@xxxxxxxxxxxxxxx
Subject: Re: [cobalt-security] [RAQ4] Denying specific IP from DNS
traffic
On Sun, 16 Feb 2003, Mailing List wrote:
> On 2/14/03 3:19 PM, "David Thacker" wrote:
>
> > Some hosehead from 211.135.200.222 [IP1A0602.hkd.mesh.ad.jp] has been
> > banging my RaQ4 server with this DNS attack for over a week:
>
> David (good name:)
>
> We have seen the .JP send tons of SPAM and other crap, we just set
> hosts.deny to ALL: 211. , I think they have the whole A Class.
no, they don't.
it's all Asia, though.
rgds,
netcat
_______________________________________________
cobalt-security mailing list
cobalt-security@xxxxxxxxxxxxxxx
http://list.cobalt.com/mailman/listinfo/cobalt-security
_______________________________________________
cobalt-security mailing list
cobalt-security@xxxxxxxxxxxxxxx
http://list.cobalt.com/mailman/listinfo/cobalt-security