[SATLUG] ATT Thanks you

[tom weeks]

On Sunday 07 January 2007 12:45, John Champion wrote:
[...]
> You can also turn off whatever service on your machine that they are trying
> to hack, by default, I have ping turned off and telnet.
>
> You may also try adding this IP to your hosts.deny file.

That won't block the attacks against your system.  It will only stop attacks 
on daemons compiled with libwrap support from servicing the hits.  The 
attacks will still make it through to use space apps.  Not so effective..  
Instead block them with iptables:

iptables -A INPUT -s  69.153.198.0/23 -j DROP

This will drop the 69.153.198-199.255 range of IPs (both owned by swbell DSL 
pools.

Tweeks