[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] Is a firewall necessary with a RaQ?



> Another example. Today, now fat and happy that I can finally see my logs 
> again with some clarity, I see about six attempts in a row from a "european 
> internet registry" IP hitting me on my ssh port. I put in a DENY entry for 
> that IP and set it to log. Now, if I'm not wrong on the how this works, if 
> this IP addy connects to me again on *any* port, I'll see a deny entry. 

Correct!

> Should this IP attempt a connect on a ligit port, I might see my way clear 
> to releasing that entry on my chains rules. For now, one IP is blocked 
> because the person who was on it tried to connect to me via ssh and did not 
> likely have good intentions.
 
Gerald