Home > ipcop, networking, Software > Another great IPCop addon: Banish

Another great IPCop addon: Banish

At one of my clients we’ve been fighting a DDOS attack that their Sonicwall TZ170 was not handling very well. We replaced it with an old workstation running IPCop to take it up a notch. We got most of it under control, but noticed some activity still coming from certain IP addresses, probably zombies. I added Banish, and then we blacklisted all the IPs we found in the logs. It was very quick and easy to do. It basically adds entries in the iptables to restrict all traffic to or from certain sources: single IP addresses, ranges, or mac addresses, but from within the IPCop GUI interface. One more thing to make me an IPCop fan!

Advertisements
Categories: ipcop, networking, Software
  1. No comments yet.
  1. No trackbacks yet.

Leave a Reply

Please log in using one of these methods to post your comment:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: