[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] Is a firewall necessary with a RaQ?



"Todd Kirk" <tkirk@xxxxxxxxxxxxxx> wrote:
> A useability thought here - if someone is on a dynamic IP address the
> next time they logon (given a fresh IP address) then the firewall would
> cease block the correct person...further an innocent person who may have
> been assigned the original 'now blocked' dynamic IP could not see your
> server and therefore any of or websites!

You don't have to block their port 80 access.  If someone is making attempts
at the SSH port you may decide to block that IP's access to SSH, FTP and
SMTP but not web (simple example).  ipchains allows rules based on IPs and
ports along with some other options.

--
Steve Werby
President, Befriend Internet Services LLC
http://www.befriend.com/