Topic: blocking IP block...

[Steve Lewis]

Hello,

I continue to get SPAM and CODE RED hits from several block of IP from China. I would like to block those.

What is the best, easiest, most effective way to make the block of IPs "disappear" so to speak.

Steve Lewis

[Nathan Fowler]

/sbin/ipchains -A input -p tcp --dport 80 --source / -j DENY -i

Add it to your /etc/rc.d/rc.local to keep these settings on reboot.

[Steve Lewis]

Thank you, I will give this a whirl.

Steve Lewis

[Benny Andersen]

Hi
Just a note, we had a similar problem so we ran a program called blockchains it seemd simple enough to install and is effective.

[Richard Swann]

Hi,

Blockchains sounds interesting but a search on google finds nothing resembling it - do you have a url for it?

Richard Swann

[Luis A. Navas]

try to use SNORT with ACID, this feature works blocking IP that can try to vulnerable the system.

Sorry for my bad english