Hi, I was getting a lot of conecction trying to attack a site and I would like to know how can I block a whole range of IP, I got this from the whois of the host 85.104.141.36: inetnum: 85.104.128.0 - 85.104.255.255 netname: TurkTelekom descr: Turk Telekom ADSL-alcatel country: tr And a lot more, as I see it''s a big range from a country that I don''t know and I''m not interested on get connections from there. Thanks in advance for any clue about it. Regards, Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
Jonathan Gonzalez V. escribió:> Hi, > > I was getting a lot of conecction trying to attack a site and I would > like to know how can I block a whole range of IP, I got this from the > whois of the host 85.104.141.36: > > inetnum: 85.104.128.0 - 85.104.255.255 > netname: TurkTelekom > descr: Turk Telekom ADSL-alcatel > country: tr > > And a lot more, as I see it''s a big range from a country that I don''t > know and I''m not interested on get connections from there. > > Thanks in advance for any clue about it. >in /etc/shorewall/blacklist 85.0.0.0/8 restart shorewall ps: this is an awful idea that gives you no real security and should be used only on emergency cases. ps1: please read the manual the next time, this is documented to death.... thank you. Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
Cristian Rodriguez escribió:> Jonathan Gonzalez V. escribió: >> Hi, >> >> I was getting a lot of conecction trying to attack a site and I would >> like to know how can I block a whole range of IP, I got this from the >> whois of the host 85.104.141.36: >> >> inetnum: 85.104.128.0 - 85.104.255.255 >> netname: TurkTelekom >> descr: Turk Telekom ADSL-alcatel >> country: tr >> >> And a lot more, as I see it''s a big range from a country that I don''t >> know and I''m not interested on get connections from there. >> >> Thanks in advance for any clue about it. >> > > > in /etc/shorewall/blacklist > > 85.0.0.0/8 > > restart shorewall > > ps: this is an awful idea that gives you no real security and should be > used only on emergency cases. > > ps1: please read the manual the next time, this is documented to > death.... thank you. > >or more precisely and simple 85.104.128.0-85.104.255.255 in the same file and here is the documentation http://www.shorewall.net/blacklisting_support.htm with detailed description of this feature, suggested only for emergency cases, beacuse you can en being cracked/attacked from the rest of IP address space while you think "ohh.. Im safe because I banned the bad guys from Turquía.." you have been warned ;) Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
Cristian Rodriguez wrote:> Jonathan Gonzalez V. escribió: >> Hi, >> >> I was getting a lot of conecction trying to attack a site and I would >> like to know how can I block a whole range of IP, I got this from the >> whois of the host 85.104.141.36: >> >> inetnum: 85.104.128.0 - 85.104.255.255 >> netname: TurkTelekom >> descr: Turk Telekom ADSL-alcatel >> country: tr >> >> And a lot more, as I see it''s a big range from a country that I don''t >> know and I''m not interested on get connections from there. >> >> Thanks in advance for any clue about it. >> > > > in /etc/shorewall/blacklist > > 85.0.0.0/8 >That not quite right, don''t need to block the entire 85.x.x.x subnet. There are some really great tools build into shorewall, "/sbin/shorewall iprange 85.104.128.0-85.104.255.255" returns 85.104.128.0/17. Jerry Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
Jerry Vonau escribió:>> >> in /etc/shorewall/blacklist >> >> 85.0.0.0/8 >> > > That not quite right,yes, thats''s the reason of second reply, bad calculator ;) Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
Cristian Rodriguez <judas_iscariote@shorewall.net> writes: Thanks for your recommendation, I Just don''t want to still getting mail from that range of ip. Thanks for the documentation, I didn''t know that were exist a blacklist file, I''ll keep searching for more documentation. Regars,>> >> in /etc/shorewall/blacklist >> >> 85.0.0.0/8 >> >> restart shorewall >> >> ps: this is an awful idea that gives you no real security and should be >> used only on emergency cases. >> >> ps1: please read the manual the next time, this is documented to >> death.... thank you. >> >> > > or more precisely and simple > > 85.104.128.0-85.104.255.255 in the same file > > and here is the documentation > > http://www.shorewall.net/blacklisting_support.htm with detailed > description of this feature, suggested only for emergency cases, beacuse > you can en being cracked/attacked from the rest of IP address space > while you think "ohh.. Im safe because I banned the bad guys from > Turquía.." > > you have been warned ;)Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
Jonathan Gonzalez V. wrote:> Cristian Rodriguez <judas_iscariote@shorewall.net> writes: > > Thanks for your recommendation, I Just don''t want to still getting > mail from that range of ip. > > Thanks for the documentation, I didn''t know that were exist a > blacklist file, I''ll keep searching for more documentation.http://www.shorewall.net/Documentation_Index.html is an excellent place to start your search. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
Jonathan Gonzalez V. wrote:> Hi, > > I was getting a lot of conecction trying to attack a site and I would > like to know how can I block a whole range of IP, I got this from the > whois of the host 85.104.141.36: > > inetnum: 85.104.128.0 - 85.104.255.255 > netname: TurkTelekom > descr: Turk Telekom ADSL-alcatel > country: tr > > And a lot more, as I see it''s a big range from a country that I don''t > know and I''m not interested on get connections from there. > > Thanks in advance for any clue about it. > > Regards, > > > ------------------------------------------------------------------------ > > Using Tomcat but need to do more? Need to support web services, security? > Get stuff done quickly with pre-integrated technology to make your job easier > Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 > > > ------------------------------------------------------------------------ > > _______________________________________________ > Shorewall-users mailing list > Shorewall-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/shorewall-usersI know that to block 85.104.0.0- 85.104.255.255 it would look like this 85.104.0.0/16. I am not sure how to figure 85.104.128.0 - 85.104.255.255 Someone else can help us with that. If I want to block a subnet I place in my hosts.deny file ALL : 85.104.0.0/16 Jack Jack Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
shorewall iprange 85.104.128.0-85.104.255.255 85.104.128.0/17 http://www.cisco.com/warp/public/701/3.html gives details on IP address ranges. http://www.csgnetwork.com/ipinfocalc.html is a calculator for subnet masks etc. Prasanna. On 7/7/06, Jack Hale <jack@haleprint.com> wrote:> Jonathan Gonzalez V. wrote: > > Hi, > > > > I was getting a lot of conecction trying to attack a site and I would > > like to know how can I block a whole range of IP, I got this from the > > whois of the host 85.104.141.36: > > > > inetnum: 85.104.128.0 - 85.104.255.255 > > netname: TurkTelekom > > descr: Turk Telekom ADSL-alcatel > > country: tr > > > > And a lot more, as I see it''s a big range from a country that I don''t > > know and I''m not interested on get connections from there. > > > > Thanks in advance for any clue about it. > > > > Regards, > > > > > > ------------------------------------------------------------------------ > > > > Using Tomcat but need to do more? Need to support web services, security? > > Get stuff done quickly with pre-integrated technology to make your job easier > > Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo > > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 > > > > > > ------------------------------------------------------------------------ > > > > _______________________________________________ > > Shorewall-users mailing list > > Shorewall-users@lists.sourceforge.net > > https://lists.sourceforge.net/lists/listinfo/shorewall-users > > I know that to block 85.104.0.0- 85.104.255.255 it would look like this > 85.104.0.0/16. I am not sure how to figure 85.104.128.0 - 85.104.255.255 > Someone else can help us with that. > If I want to block a subnet I place in my hosts.deny file > ALL : 85.104.0.0/16 > > Jack > > Jack > > Using Tomcat but need to do more? Need to support web services, security? > Get stuff done quickly with pre-integrated technology to make your job easier > Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 > _______________________________________________ > Shorewall-users mailing list > Shorewall-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/shorewall-users >Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
Jack Hale wrote:> Jonathan Gonzalez V. wrote: > >> Hi, >> >> I was getting a lot of conecction trying to attack a site and I would >> like to know how can I block a whole range of IP, I got this from the >> whois of the host 85.104.141.36: >> >> inetnum: 85.104.128.0 - 85.104.255.255 >> netname: TurkTelekom >> descr: Turk Telekom ADSL-alcatel >> country: tr >> >> And a lot more, as I see it''s a big range from a country that I don''t >> know and I''m not interested on get connections from there. >> >> Thanks in advance for any clue about it. >> >> Regards, >> >> >> ------------------------------------------------------------------------ >> >> Using Tomcat but need to do more? Need to support web services, security? >> Get stuff done quickly with pre-integrated technology to make your job easier >> Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo >> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 >> >> >> ------------------------------------------------------------------------ >> >> _______________________________________________ >> Shorewall-users mailing list >> Shorewall-users@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/shorewall-users >> > > I know that to block 85.104.0.0- 85.104.255.255 it would look like this > 85.104.0.0/16. I am not sure how to figure 85.104.128.0 - 85.104.255.255 >85.104.128.0/17> Someone else can help us with that. > If I want to block a subnet I place in my hosts.deny file > ALL : 85.104.0.0/16 > > Jack > > Jack > > Using Tomcat but need to do more? Need to support web services, security? > Get stuff done quickly with pre-integrated technology to make your job easier > Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 > _______________________________________________ > Shorewall-users mailing list > Shorewall-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/shorewall-users >-- Ray Booysen rj_booysen@rjb.za.net Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642