North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: blocking unallocated subnets

  • From: Randy Bush
  • Date: Fri Dec 02 15:12:10 2005 
> Another option is to automate the updates and leave the hard work
> to us!

the op was discussing port-specific filtering for dns only.  could
you explain how i can automake my /etc/ipfw.rules leaving the hard
work to you?  e.g.

    add deny udp from 203.49.118.0/24 to any 53

randy