Shorewall users - Jun 2003 - blacklisting

Hello,

Using shorewall 1.4.4a on redhat 9 latest kernel.

When I connect to Dalnet server on Mirc I am get hammered by their proxy 
scanner. It scans all my ips and a hugh number of ports. This takes about 
20-30 mins.

I added their proxy scanner ip 204.152.186.58 to the blacklist file and 
restarted shorewall.
But it is still showing up in the logs.

In the shorewall.conf
BLACKLIST_LOGLEVELBLACKLIST_DISPOSITION=DROP

Thank you.

P. Hennessy

_________________________________________________________________
Protect your PC - get McAfee.com VirusScan Online 
http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963

On Tue, 03 Jun 2003 15:38:28 +0000, P Hennessy <paddy667@hotmail.com> 
wrote:
> Hello,
>
> Using shorewall 1.4.4a on redhat 9 latest kernel.
>
> When I connect to Dalnet server on Mirc I am get hammered by their proxy 
> scanner. It scans all my ips and a hugh number of ports. This takes about 
> 20-30 mins.
>
> I added their proxy scanner ip 204.152.186.58 to the blacklist file and 
> restarted shorewall.
> But it is still showing up in the logs.
>
Did you set the ''blacklist'' option on your external interface
in
/etc/shorewall/interfaces?

-Tom
-- 
Tom Eastep    \ Shorewall - iptables made easy
Shoreline,     \ http://www.shorewall.net
Washington USA  \ teastep@shorewall.net