Re: crazy hackers and logwatch

[Dan Hollis <goemon anime net>]

On Tue, 9 Aug 2005, Ted Kaczmarek wrote:
> What is really going to be funny, is when someone ends up with a few
> hundred thousands lines of firewall config and restart's their firewall
> or reloads their box. I don't see where most people would benefit from a
> slew of 32 bit length firewall rules. Now if it where smart enough to
> block the entire ip block, preferably top registration that would be
> much more useful. 

that's why pam_abl is so nice. not only does it deceive the attackers, 
it's also near zero-cost. no huge in-kernel firewall rules. simple. easy. 
painless.

-Dan