[oclug] Blocking Domains

Dan Cardamore wombat at hld.ca
Tue Feb 20 13:16:29 EST 2001


Cool, I'll have to try that dns ipchains thing :)

To block an entire .xxx ip, you can do:

xxx.xxx.xxx.0/24 which will mask out all of the last subnet which
results in ipchains only looking at the xxx.xxx.xxx portion of the ip.

Dan

On Tue, Feb 20, 2001 at 12:08:11PM -0500, Joe Burpee wrote:
> Dan York wrote:
> > ipchains works entirely with IP addresses, so to do it with ipchains you
> > would need to figure out all possible IP addresses that would be coming
> > from pacbell.net.
> 
> Not so.  ipchains works fine with domain names -- as long as your DNS is
> up when you append the rule.  But why not just block the offending
> subnet?
> 
> Joe
> _______________________________________________
> oclug mailing list
> oclug at lists.oclug.on.ca
> http://www.oclug.on.ca/mailman/listinfo/oclug
________________________________________________________________
 Dan Cardamore          wombat at hld.ca         http://www.hld.ca
 GnuPGP Key:            mailto:wombat at hld.ca?subject=sendpgpkey
 Email Stats:           http://www.hld.ca/~wombat/emailStats
 Opensource projects:   http://www.hld.ca/opensource
 My Groupware project:  http://www.gwpeople.com
________________________________________________________________



More information about the OCLUG mailing list