From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from lists.gentoo.org ([140.105.134.102] helo=robin.gentoo.org) by nuthatch.gentoo.org with esmtp (Exim 4.50) id 1ENVBa-0005QF-Kd for garchives@archives.gentoo.org; Thu, 06 Oct 2005 12:49:23 +0000 Received: from robin.gentoo.org (localhost [127.0.0.1]) by robin.gentoo.org (8.13.5/8.13.5) with SMTP id j96CdIgw011719; Thu, 6 Oct 2005 12:39:18 GMT Received: from ihug-mail.icp-qv1-irony2.iinet.net.au (ihug-mail.icp-qv1-irony2.iinet.net.au [203.59.1.196]) by robin.gentoo.org (8.13.5/8.13.5) with ESMTP id j96CZvjw009747 for <gentoo-security@lists.gentoo.org>; Thu, 6 Oct 2005 12:35:59 GMT Received: from 203-59-88-73.dyn.iinet.net.au (HELO moriah.localdomain) ([203.59.88.73]) by ihug-mail.icp-qv1-irony2.iinet.net.au with ESMTP; 06 Oct 2005 20:44:33 +0800 X-BrightmailFiltered: true X-Brightmail-Tracker: AAAAAA== Received: from localhost (localhost [127.0.0.1]) by moriah.localdomain (Postfix) with ESMTP id 7743F14F2AB for <gentoo-security@lists.gentoo.org>; Thu, 6 Oct 2005 20:44:31 +0800 (WST) Received: from moriah.localdomain ([127.0.0.1]) by localhost (moriah [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 32493-14 for <gentoo-security@lists.gentoo.org>; Thu, 6 Oct 2005 20:44:18 +0800 (WST) Received: from rattus (rattus [192.168.1.2]) by moriah.localdomain (Postfix) with ESMTP id AA29814F2A3 for <gentoo-security@lists.gentoo.org>; Thu, 6 Oct 2005 20:44:18 +0800 (WST) Subject: Re: [gentoo-security] [OT?] automatically firewalling off IPs From: William Kenworthy <billk@iinet.net.au> To: gentoo-security@lists.gentoo.org In-Reply-To: <4344FA49.8050604@gmail.com> References: <000001c5ca16$efd98b30$0200080a@SPRITE> <4344DCBD.9010804@gmail.com> <1128590158.16504.59.camel@rattus> <4344FA49.8050604@gmail.com> Content-Type: text/plain Organization: Home! Date: Thu, 06 Oct 2005 20:44:17 +0800 Message-Id: <1128602657.16504.72.camel@rattus> Precedence: bulk List-Post: <mailto:gentoo-security@lists.gentoo.org> List-Help: <mailto:gentoo-security+help@gentoo.org> List-Unsubscribe: <mailto:gentoo-security+unsubscribe@gentoo.org> List-Subscribe: <mailto:gentoo-security+subscribe@gentoo.org> List-Id: Gentoo Linux mail <gentoo-security.gentoo.org> X-BeenThere: gentoo-security@gentoo.org Reply-to: gentoo-security@lists.gentoo.org Mime-Version: 1.0 X-Mailer: Evolution 2.2.3 Content-Transfer-Encoding: 7bit X-Virus-Scanned: amavisd-new at localdomain X-Archives-Salt: c88bc99e-bcec-4d51-92ff-09174652370e X-Archives-Hash: ceed3c340562b74f072db12b8749e6cb On Thu, 2005-10-06 at 13:19 +0300, Matan Peled wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > William Kenworthy wrote: > > Can anyone comment whether IP spoofing (for hiding country of origin) is > > common? Seems quite unlikely - at least at the current state of things. > > Is it even possible to tell (at the firewall interface?) > > > > BillK > > I think that for hiding country of origin by IP spoofing is quite useless, at ... Thanks, good description. BillK -- gentoo-security@gentoo.org mailing list