Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Blocking Traffic by Country on Production Networks
Timothy M. Mullen

When I originally posted to Bugtraq regarding the use of country-by-country sets to control traffic to or from any particular country, I knew that it was not a new idea. However, applying the concept for use with Microsoft's ISA Server was at least a new application for it, and apparently has had some utility for people based on the thousands of downloads that have been made of the free sets from the Hammer of God Web site.

Comments Mode:
Blocking Traffic by Country on Production Networks 2008-07-20
Anonymous (1 replies)
Re: Blocking Traffic by Country on Production Networks 2008-07-22
Anonymous (1 replies)
Re: Re: Blocking Traffic by Country on Production Networks 2009-01-05
Anonymous (1 replies)
Re: Re: Re: Blocking Traffic by Country on Production Networks 2009-05-27
Anonymous (1 replies)
For the most part, China, and Australian networks, and a few attacks from Amsterdam have occurred on our network. Being able to block a country would be of benefit, if, there are enough attacks to make it necessary. Currently my firewall's IPS rule drops connections if they meet certain criteria, and of course, I do have a ban list. if that ban list has more than 15 different attackers from the same overall network, say from China, it would be nice to simply block that entire region/country.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/infocus/1900/1327#1327







 

Privacy Statement
Copyright 2009, SecurityFocus