RE: hosts.deny

["Ed Street" <blacknet@simplyaquatics.com>]

Hello,

Well a few short lines of code would do that with no problem.

Ed

-----Original Message-----
From: netfilter-admin@lists.samba.org
[mailto:netfilter-admin@lists.samba.org] On Behalf Of Antony Stone
Sent: Sunday, July 07, 2002 8:12 PM
To: netfilter@lists.samba.org
Subject: Re: hosts.deny

On Monday 08 July 2002 1:01 am, Ed Street wrote:

> Hello,
>
> Dns lookups.

Well, yes, obviously the way to resolve hostnames to IP addresses is by
DNS 
lookups :-)

What I meant was, how does your script cope when you want to block
something 
like, say, www.microsoft.com, and the DNS lookup returns 6 different IP 
addresses, from two different class C ranges (which is what I just got
by 
doing a dig on the name) ?

> Note some cases the /netmask is somewhat overkill.  I felt
> better safe than sorry, incase they have a block of ip's.

I'd have thought it unlikely that a hostname would resolve to multiple 
contiguous IPs.   If a company has enough load that they're running
multiple 
servers, they're probably doing it on multiple feeds as well, which will
have 
widely differing IP addresses.....

 

Antony.

> -----Original Message-----
> From: netfilter-admin@lists.samba.org
> [mailto:netfilter-admin@lists.samba.org] On Behalf Of Antony Stone
> Sent: Sunday, July 07, 2002 7:57 PM
> To: netfilter@lists.samba.org
> Subject: Re: hosts.deny
>
> On Monday 08 July 2002 12:48 am, Ed Street wrote:
> > Hello,
> >
> > Sure attached is the hosts.trashcan file I am currenly testing.
>
> Interesting.   How does your script handle resolving machine names to
IP
>
> addresses (as shown in several examples in your trashcan file) when
one
> name
> corresponds to several IPs ?
>
>
>
> Antony.