Re: What is this Very Stupid DOS Attack Script?

Marian Hettwer wrote:

>On Mi, 6.04.2005, 17:57, Willem Jan Withagen sagte:
>  
>
>>I've build some swatch-rules that after two of these hits, I dump
>>the host into ifpw-deny space.
>>
>>    
>>
>Aye. I thought about writing a script, doing the same like yours, too.
>Could you post this script somewhere, so that I could add some
>functionality or just use it ?
>
>  
>
This is similar to what I do... except

I just run a cronjob every so often... daily.. weekly.. what have you.. 
that will restart ipfw...  probably there is a cleaner solution, but it  
does the job for me.... as far as cleaning out the dozens of IPs that 
get blocked for connecting to ports they shouldnt on my boxes

_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"