OT: Security....

Rodolfo J. Paiz rpaiz at simpaticus.com
Fri Oct 29 00:12:26 UTC 2004


On Thu, 2004-10-28 at 23:35 +1000, David wrote:
> Here's a list of hack source addresses that
> I've recorded over a period of two months:-
[...]
> I checked one the other day and the IP was owned by a Korean University.
> 

And that's the problem. The majority of IP addresses you'll get are from
dial-up pools and other common uses. Blocking it permanently does no
good... the guy who attacked you is no longer there.

As an example, when I block IP addresses dynamically, I unblock them
after two days. I have almost *never* seen an IP address repeat itself,
and after a while I stopped even checking for repeats.

Cheers,

-- 
Rodolfo J. Paiz <rpaiz at simpaticus.com>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20041028/bf3d82ce/attachment-0001.sig>


More information about the fedora-list mailing list