Paul M Foster wrote:
>On Sat, Sep 11, 2004 at 08:19:51AM -0400, Steve Szmidt wrote:
>
><snip>
>
>
>
>>What I do is block every known IP range which I've discovered that they use,
>>at the firewall (which is a seperate machine). This way it cannot "call
>>home". Then if that particular office needs to access let's say the knowledge
>>base, I let a Linux machine, configured to look like Netscape or IE, bypass
>>the block.
>>
>>
>
>I'd be _very_ interested in a list of those IP ranges. ;-}
>
>Paul
>-----------------------------------------------------------------------
>This list is provided as an unmoderated internet service by Networked
>Knowledge Systems (NKS). Views and opinions expressed in messages
>posted are those of the author and do not necessarily reflect the
>official policy or position of NKS or any of its employees.
>
>
>
Load a copy of Openbsd. configure pf.conf to "block in all" and "block
out all" as your first entry in the rules set, then configure the
software bridge to "block non ip" and nothing will get past the the
external interface. That puts a stop to the incessant yammering of a
Mickey$oft box on the internet.
Paddy
-----------------------------------------------------------------------
This list is provided as an unmoderated internet service by Networked
Knowledge Systems (NKS). Views and opinions expressed in messages
posted are those of the author and do not necessarily reflect the
official policy or position of NKS or any of its employees.
This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 17:29:49 EDT