OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [ISSForum] Any way to block foreign IP addresses

From: Reiver (reiver2002hotmail.com)
Date: Thu Oct 20 2005 - 15:28:51 CDT

Better to do that on the network level and not overload your sensors
(especially server sensors). I only block IPs in policies for quick temp
blocks until a network rule can be implemented or the threat has moved on
(ISP DHCP, etc).

Reiver

----- Original Message -----
From: "Larry Bowers" <lbowersnipco.coop>
To: <issforumiss.net>
Sent: Wednesday, October 19, 2005 7:36 AM
Subject: [ISSForum] Any way to block foreign IP addresses

I'm wondering if it is possible, through policies in SiteProtector, to block
IP address ranges. What I was thinking was to block access from all foreign
IP addresses as they have no need to access my public connections. I looked
up the IP to Country table and it is not as easy as at first thought. So I
was thinking maybe someone all ready invented that wheel.

Any ideas?

Thanks

Larry Bowers
Vice President of Computer Systems
lbowersnipco.coop
Northwest Iowa Power Cooperative
County Road C38
LeMars, Iowa 51031
Voice 712-546-4141
FAX 712-546-8795
www.nipco.coop

--------------------------------------------------------------------------------

> _______________________________________________
> ISSForum mailing list
> ISSForumiss.net
>
> TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
> https://atla-mm1.iss.net/mailman/listinfo/issforum
>
> To contact the ISSForum Moderator, send email to mod-issforumiss.net
>
> The ISSForum mailing list is hosted and managed by Internet Security
> Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.

_______________________________________________
ISSForum mailing list
ISSForumiss.net

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforumiss.net

The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.