RE: hosts.deny

["Ed Street" <blacknet@simplyaquatics.com>]

Hello,

Sure will.  Should have some free time this week to work on it.

Ed

-----Original Message-----
From: netfilter-admin@lists.samba.org
[mailto:netfilter-admin@lists.samba.org] On Behalf Of Antony Stone
Sent: Sunday, July 07, 2002 10:34 PM
To: netfilter@lists.samba.org
Subject: Re: hosts.deny

On Monday 08 July 2002 3:27 am, Ed Street wrote:

> Hello,
>
> Well a few short lines of code would do that with no problem.

Sounds good.   Could you post the code to the list so that people can
see how 
it can be done ?   It might be useful for a few different
applications...

Thanks,

Antony.

> -----Original Message-----
> From: netfilter-admin@lists.samba.org
> [mailto:netfilter-admin@lists.samba.org] On Behalf Of Antony Stone
> Sent: Sunday, July 07, 2002 8:12 PM
> To: netfilter@lists.samba.org
> Subject: Re: hosts.deny
>
> On Monday 08 July 2002 1:01 am, Ed Street wrote:
> > Hello,
> >
> > Dns lookups.
>
> Well, yes, obviously the way to resolve hostnames to IP addresses is
by
> DNS
> lookups :-)
>
> What I meant was, how does your script cope when you want to block
> something
> like, say, www.microsoft.com, and the DNS lookup returns 6 different
IP
> addresses, from two different class C ranges (which is what I just got
> by
> doing a dig on the name) ?
>
> > Note some cases the /netmask is somewhat overkill.  I felt
> > better safe than sorry, incase they have a block of ip's.
>
> I'd have thought it unlikely that a hostname would resolve to multiple
> contiguous IPs.   If a company has enough load that they're running
> multiple
> servers, they're probably doing it on multiple feeds as well, which
will
> have
> widely differing IP addresses.....
>
>
>
> Antony.
>
> > -----Original Message-----
> > From: netfilter-admin@lists.samba.org
> > [mailto:netfilter-admin@lists.samba.org] On Behalf Of Antony Stone
> > Sent: Sunday, July 07, 2002 7:57 PM
> > To: netfilter@lists.samba.org
> > Subject: Re: hosts.deny
> >
> > On Monday 08 July 2002 12:48 am, Ed Street wrote:
> > > Hello,
> > >
> > > Sure attached is the hosts.trashcan file I am currenly testing.
> >
> > Interesting.   How does your script handle resolving machine names
to
>
> IP
>
> > addresses (as shown in several examples in your trashcan file) when
>
> one
>
> > name
> > corresponds to several IPs ?
> >
> >
> >
> > Antony.