From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from lists.gentoo.org ([140.105.134.102] helo=robin.gentoo.org) by nuthatch.gentoo.org with esmtp (Exim 4.50) id 1ENRwY-0004rm-Q5 for garchives@archives.gentoo.org; Thu, 06 Oct 2005 09:21:39 +0000 Received: from robin.gentoo.org (localhost [127.0.0.1]) by robin.gentoo.org (8.13.5/8.13.5) with SMTP id j969AvfC026135; Thu, 6 Oct 2005 09:10:57 GMT Received: from ihug-mail.icp-qv1-irony5.iinet.net.au (ihug-mail.icp-qv1-irony5.iinet.net.au [203.59.1.199]) by robin.gentoo.org (8.13.5/8.13.5) with ESMTP id j9697YAu027501 for ; Thu, 6 Oct 2005 09:07:36 GMT Received: from 203-59-88-73.dyn.iinet.net.au (HELO moriah.localdomain) ([203.59.88.73]) by ihug-mail.icp-qv1-irony5.iinet.net.au with ESMTP; 06 Oct 2005 17:16:08 +0800 X-BrightmailFiltered: true X-Brightmail-Tracker: AAAAAA== Received: from localhost (localhost [127.0.0.1]) by moriah.localdomain (Postfix) with ESMTP id 4AFEA14F2C8 for ; Thu, 6 Oct 2005 17:16:07 +0800 (WST) Received: from moriah.localdomain ([127.0.0.1]) by localhost (moriah [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 32493-04 for ; Thu, 6 Oct 2005 17:15:59 +0800 (WST) Received: from rattus (rattus [192.168.1.2]) by moriah.localdomain (Postfix) with ESMTP id BC9CD14F2C3 for ; Thu, 6 Oct 2005 17:15:58 +0800 (WST) Subject: Re: [gentoo-security] [OT?] automatically firewalling off IPs From: William Kenworthy To: gentoo-security@lists.gentoo.org In-Reply-To: <4344DCBD.9010804@gmail.com> References: <000001c5ca16$efd98b30$0200080a@SPRITE> <4344DCBD.9010804@gmail.com> Content-Type: text/plain Organization: Home! Date: Thu, 06 Oct 2005 17:15:57 +0800 Message-Id: <1128590158.16504.59.camel@rattus> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-security@gentoo.org Reply-to: gentoo-security@lists.gentoo.org Mime-Version: 1.0 X-Mailer: Evolution 2.2.3 Content-Transfer-Encoding: 7bit X-Virus-Scanned: amavisd-new at localdomain X-Archives-Salt: 2e2efd4e-96c4-43d5-bbc1-de24c094ba97 X-Archives-Hash: 9fca1059c043493829824dacb3b212f1 Can anyone comment whether IP spoofing (for hiding country of origin) is common? Seems quite unlikely - at least at the current state of things. Is it even possible to tell (at the firewall interface?) BillK On Thu, 2005-10-06 at 11:13 +0300, Matan Peled wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Tad Glines wrote: > > These rules only block out the offending IP. All others remain un-blocked. > > IP spoofing. It isn't that far fetched, really... > > > - -- gentoo-security@gentoo.org mailing list