Monday, August 18, 2008

Re: [asterisk-biz] Fraud. (here we go again)

Maybe an overly shotgun approach for your tastes, but I personally
firewall off all IP blocks from APNIC (the Asian-Pacific RIR) delegated
to the southeast Asian countries (China, Korea, Vietnam, Thailand, Laos,
Hong Kong -- yes, I know it is not a country). Over 90% of my port
scans, my dictionary attacks and my problems seem to come from there.

If you take that approach, definitely don't block all the aggregate
APNIC ranges. That would exclude quite a few Australians and New
Zealanders.

There are plenty of lists available online reliably of the blocks
delegated by country, with a specific focus on that region. It is not
an uncommon practise among sysadmins.

--
Alex Balashov
Evariste Systems
Web : http://www.evaristesys.com/
Tel : (+1) (678) 954-0670
Direct : (+1) (678) 954-0671
Mobile : (+1) (706) 338-8599

_______________________________________________
--Bandwidth and Colocation Provided by http://www.api-digital.com--

AstriCon 2008 - September 22 - 25 Phoenix, Arizona
Register Now: http://www.astricon.net

asterisk-biz mailing list
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-biz

No comments: