[NTLUG:Discuss] Killing Bad People

[Rev. wRy]

On Tue, 2002-02-05 at 14:09, Daniel L. Shipman wrote:
> Actually these are the addresses of people who have port scanned me - tryed
> to log in - ftp - 

If you wanted them to not get access to just ftp try the following in
hosts.deny:

in.proftpd: .wanadoo.fr

Obviously, if you aren't running proftpd, you'll have to alter to
reflect whatever ftp daemon you are running.  

I did this, and my scans/anon login attempts went down dramatically over
the course of a week.  

Of note, I also had the same problem with club-internet.fr, and
worldonline.dk.  This was discussed heavily on the cobalt-security list
as well as the lack of response from wanadoo support.  Should be
available via their archives.

Ry
(who reversed positions on cutting them completely off from web pages
and the like)