Re: Pocket EMP device with a disposable camera's flash?

On a sunny day (Tue, 7 Nov 2006 14:51:06 +0100) it happened "Frithiof Andreas
Jensen" <frithiof.jensen@xxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
<eiq30b$hf$1@xxxxxxxxxxxxxxxxxxxxxx>:


"Jan Panteltje" <pNaonStpealmtje@xxxxxxxxx> wrote in message
news:ein7vh$gd5$1@xxxxxxxxxxxxxxxxxx
On a sunny day (Sun, 5 Nov 2006 23:26:05 -0000) it happened "john jardine"
<john@xxxxxxxxxxxxxxxxxxxxx> wrote in
<454e6626$0$12064$88260bb3@xxxxxxxxxxxxxxxxx>:

Yes I added the bot trap, a new search engine comes on line every week it
seems and then download the whole site (about a gigabyte) several times
within the shortest time bandwidth allows.

You should perhaps set up a tar-pit: redirect to a virtual server serving
/dev/random over a 16 kb/sec link!

Yes, nice idea ;-) I have module rewrite installed, problem is the number
of entries is now getting enormous after running this server a few years,
so I have resorted to an even meaner way of killing offenders:
Using iptables as firewall:
-A INPUT -s 84.97.245.140 -j DROP
-A OUTPUT -s 84.97.245.140 -j REJECT --reject-with icmp-port-unreachable

There are now 270 entries in the ipchains firewall.

I am not sure if it is legal, I also run a name server, these guys will
never find my IP again ever via hostname lookup :-)

Many are killfiled because they try URL redirect,
140.245.97-84.rev.gaoland.net - - [04/Nov/2006:06:02:04 +0100] "GET http://88.191.22.160/cgbdm.txt HTTP/1.1" 404 899
is enough to semi-auto add this IP as a firewall entry.
In spite of the 404 denial, do not want my server a part of a botnet.




.

Relevant Pages

  • Netscreen Malicious URL - how to?
    ... An example "pretend" firewall entry, ... Those entries do work for both inbound and outbound, ... external proxy server then coming back into our server. ...
    (comp.security.firewalls)
  • Re: vsftpd as an Anonymous FTP server
    ... Your server hasn't got your firewall set up as the default route - the ... Are there any entries in /var/log/vsftpd.log ...
    (alt.os.linux.suse)
  • Weird entries in my firewall
    ... I've been getting these weird entries in my firewall (iptables) for a while... ... Now, the source is the internal IP of my server, which is not connected to the firewall. ...
    (Security-Basics)
  • Checking Port Activity with TCPView shows a lot of sqlservr.exe TIME_WAIT
    ... Windows 2003 server, used as a webserver. ... The server is behind a firewall. ... I saw a lot of entries like: ...
    (microsoft.public.windows.server.security)
  • Re: CEICW fails at firewall config
    ... Do you or do you not have ISA 2000 or ISA 2004 installed on the SBS server? ... Do you have 2 NICs in the SBS? ... CEICW fails on firewall configuration every time. ... >>> Call to Creating the protected networks access rule returned ok. ...
    (microsoft.public.windows.server.sbs)