Timeline for Does it add anything to restrict IP address?
Current License: CC BY-SA 3.0
5 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jan 21, 2015 at 11:32 | comment | added | Josef | This list is not blocking IP blocks! Only single IPs that have been abusive in the last 24 hours, as reported by the members of the service! | |
| Jan 20, 2015 at 23:16 | comment | added | zxq9 | A caveat to dynamic bans based on behavior -- you have to actually keep on top of changing behaviors, and this requires effort (though this is the only actually effective solution). Just like people want a "fix my broken arm pill" and a "fix my marriage pill" we really wish we could just pay for a blacklist service and that everything will just work out OK. Which is hilarious, because even with a blacklist service you will still get tons of bad hits. | |
| Jan 20, 2015 at 23:15 | comment | added | zxq9 | @Josef Letting a blacklist cancel wide blocks of dynamic IPs which may have a few members participating in a botnet is a random counter, at best. Those dynamic IP block are also usually your customers. If you know what IPs should be accessing then you should use a whitelist; if not, then dynamically ban or throttle (pushback) for a short time based on behavior. External blacklists always have unknown impact -- which is insidious because you can never know what the effect really was (you don't know how much legit traffic you're missing). Enumerating badness is never going to make any sense. | |
| Jan 20, 2015 at 16:38 | comment | added | Josef | A blacklist has it advantages! I use blocklist.de on all servers I manage! While it is no replacement for other security measures, there is also no advantage of letting bots trying to bruteforce logins/try to find bugs! While I am confident that they won't be able to bruteforce crack anything, it still uses resources and fills the logs with meaningless information! | |
| Jan 20, 2015 at 5:29 | history | answered | zxq9 | CC BY-SA 3.0 |