[SLL] collaborate on a dnsbl?

[Chuck Wolber]

On Thu, 12 May 2005, Russell Evans wrote:

> On Thu, 12 May 2005 12:48:26 -0700 (PDT) "Chuck Wolber" 
> <chuckw at quantumlinux.com> wrote:
> 
> > lately. I would love to have my servers dynamically add an iptables 
> > rule to block ssh connection attempts.
> 
> 
> Why do you need ssh access from any but known hosts? ( Does that 
> sentence work? ) I would think on servers, you would already block ssh 
> connections from all hosts except from a trusted "management" host / 
> network.

I do block SSH from all but known hosts on nearly all of our, and our 
customer's servers. Some servers however, have to be open in case we need 
to connect from various connection points.

..Chuck..


-- 
http://www.quantumlinux.com 
 Quantum Linux Laboratories, LLC.
 ACCELERATING Business with Open Technology

 "The measure of the restoration lies in the extent to which we apply 
  social values more noble than mere monetary profit." - FDR