Banned countries (was Re: [oclug]why firewall?)

[Josh Zahl]

On Sat, 30 Nov 2002 Francis J. A. Pinteric Wrote:

> On Fri, 29 Nov 2002, David F. Skoll wrote:
>
> > This is what I have for Korea:
> >
> > for net in 218.144.0.0/12 218.52.0.0/14 218.50.0.0/15 218.48.0.0/15
> > \
> >   218.232.0.0/ 15 168.126.0.0/16 210.124.0.0/14 202.30.0.0/15 \
> >   203.248.0.0/13 203.232.0.0/13 210 .90.0.0/15 210.92.0.0/14 \
> >   210.96.0.0/13 210.104.0.0/13 210.112.0.0/13 210.120.0.0 /14 \
> >   210.178.0.0/15 210.180.0.0/14 210.204.0.0/14 210.216.0.0/13 \
> >   211.32.0.0/11 21 1.104.0.0/13 211.112.0.0/13 211.168.0.0/13 \
> >   211.176.0.0/12 211.192.0.0/10 218.47.0.0/13 61.96.0.0/12 \
> >   61.72.0.0/14 61.76.0.0/15 218.234.0.0/13 ; do
> >   iptables -A banned --source $net -j banned_log
> > done
>
> So much for agregation in IPv4 ;)
>

Ok, let's take a revese tak.....


is there any way to attract an attack? In the wild there are certain
behaviours that attract preditory animals, can some sort of methodolgy
apply here?

[Josh Zahl]
Sounds like you are talking about a honey pot to me. honeypots at securityfocus.com appears to be a mailing list about honey pots. If you want to build a honey pot, you might want to check it out

Josh Zahl

Sign up today for your Free E-mail at: http://www.canoe.ca/CanoeMail