Better to do that on the network level and not overload your sensors
(especially server sensors). I only block IPs in policies for quick temp
blocks until a network rule can be implemented or the threat has moved on
(ISP DHCP, etc).
Reiver
----- Original Message -----
From: "Larry Bowers" <lbowers@nipco.coop>
To: <issforum@iss.net>
Sent: Wednesday, October 19, 2005 7:36 AM
Subject: [ISSForum] Any way to block foreign IP addresses
I'm wondering if it is possible, through policies in SiteProtector, to block
IP address ranges. What I was thinking was to block access from all foreign
IP addresses as they have no need to access my public connections. I looked
up the IP to Country table and it is not as easy as at first thought. So I
was thinking maybe someone all ready invented that wheel.
Any ideas?
Thanks
Larry Bowers
Vice President of Computer Systems
lbowers@nipco.coop
Northwest Iowa Power Cooperative
County Road C38
LeMars, Iowa 51031
Voice 712-546-4141
FAX 712-546-8795
www.nipco.coop
--------------------------------------------------------------------------------
_______________________________________________
ISSForum mailing list
ISSForum@iss.net
TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
https://atla-mm1.iss.net/mailman/listinfo/issforum
To contact the ISSForum Moderator, send email to mod-issforum@iss.net
The ISSForum mailing list is hosted and managed by Internet Security
Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
_______________________________________________
ISSForum mailing list
ISSForum@iss.net
TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
https://atla-mm1.iss.net/mailman/listinfo/issforum
To contact the ISSForum Moderator, send email to mod-issforum@iss.net
The ISSForum mailing list is hosted and managed by Internet Security Systems,
6303 Barfield Road, Atlanta, Georgia, USA 30328.
