Another great IPCop addon: Banish

At one of my clients we’ve been fighting a DDOS attack that their Sonicwall TZ170 was not handling very well. We replaced it with an old workstation running IPCop to take it up a notch. We got most of it under control, but noticed some activity still coming from certain IP addresses, probably zombies. I added Banish, and then we blacklisted all the IPs we found in the logs. It was very quick and easy to do. It basically adds entries in the iptables to restrict all traffic to or from certain sources: single IP addresses, ranges, or mac addresses, but from within the IPCop GUI interface. One more thing to make me an IPCop fan!