[BlueOnyx:05529] Re: getting hammered by this ip 219.237.15.233

[Jim Dory]

  On 10/1/2010 6:18 AM, James wrote:
> The most reliable way I have found to block all traffic, permanently, from a
> specific host is to put iptables rejection rules in
> /etc/cron.hourly/log_traffic.

I too do not have a log_traffic on a BlueOnyx server. I'm reading this 
thread because httpd started behaving oddly - really dragging to load 
pages. It finally, after a few weeks, gave up the ghost with a "service 
is unavailable" message in the browser. I restarted httpd and things 
seem very normal now - quick page loading, etc. Didn't find any specific 
errors in the log files.

Looking at /etc/sysconfig/iptables it says it is generated automatically 
by log_traffic. A search for log_traffic comes up null. Would I want to 
construct a log_traffic file and put it in the cron.hourly directory? If 
so, someone pasting theirs here would be great. I could google it and 
see, but maybe here is more trustworthy.

thx, JD

-- 
Jim Dory
Engineering
City of Nome
PO Box 281
102 Division St.
Nome, AK 99762
907.443.6604

http://www.nomealaska.org