Re: Lists of IP's we should be blocking

[Devdas Bhagat <devdas () dvb homelinux org>]

On 08/12/04 15:20 +0200, Bruce Smith wrote:
> Is there a list of dangerous, evil IP's that should be blocked or at least

There is no such thing as a dangerous, evil IP. There are such things as
malicious users (human or otherwise) using computers connected to the
internet which have an IP address.

> watched closely at the borders of the Internet? Address like virus targets,
> root-kit sources and so forth.

These things are spread out all over the place. The Bogon list at
cymru.com is a good list of IP addresses to filter out on your edge
router.

> And what is the group's opinion on the idea of a general purpose dark IP
> list?

cymru tracks unassigned IP blocks. Maintaining a list of IP space which
has been allocated to RIRs but not to LIRs, is harder. Maintaining a
list of dark IP space in blocks allocated to end user is next to
impossible.

I would recommend using the list at Cymru as a filter, but trying to get
more fine grained than that is not recommended.

Devdas Bhagat
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards