<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#ffffcc" text="#000000">
You may want to consider how to trigger removal of this blocking
when the problem has gone away and the address is again used
responsibly.<br>
<br>
Maybe add a log statement with a limitation of one per day and
checking that this is no longer seen for some time? IPTABLES can do
the logging.<br>
<br>
On 04/08/10 11:00, Denis BUCHER wrote:
<blockquote cite="mid:4C592C16.50008@hsolutions.ch" type="cite">Le
03.08.2010 21:25, Kevin Darcy a écrit :
<br>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite">I would like to know if I can block
hosts doing that at the level of
<br>
/etc/hosts.allow or should I do it at the level of Bind
itself ?
<br>
</blockquote>
Use IPTables or add rules to your firewall. I don't believe
that BIND
<br>
pays any attention to /etc/hosts.allow
<br>
</blockquote>
<br>
Yes I tried iptables, it is working perfectly, and
/etc/hosts.allow
<br>
does not look to be working. This was pefect :
<br>
<br>
iptables -I INPUT 3 -p tcp -s 202.152.172.4 --dport 53 -j DROP
<br>
<br>
</blockquote>
I'm no iptables experts, but doesn't that only apply to TCP
packets?
<br>
</blockquote>
<br>
Dear Kevin,
<br>
<br>
Yes sorry, in fact I also should add a rule for UDP :
<br>
<br>
<blockquote type="cite">iptables -I INPUT 3 -p udp -s
202.152.172.4 --dport 53 -j DROP
<br>
</blockquote>
<br>
Or : (all ports)
<br>
<br>
<blockquote type="cite">iptables -I INPUT 3 -s 202.152.172.4 -j
DROP
<br>
</blockquote>
<br>
Thanks a lot !
<br>
<br>
Denis
<br>
_______________________________________________
<br>
bind-users mailing list
<br>
<a class="moz-txt-link-abbreviated" href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a>
<br>
<a class="moz-txt-link-freetext" href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a>
<br>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Best regards
Sten Carlsen
No improvements come from shouting:
"MALE BOVINE MANURE!!!"
</pre>
</body>
</html>