[BC] ANI Faking

[Cowboy]

On Sunday 11 May 2008 10:48 am, Craig Healy wrote:

>  Has anyone had to block large blocks of IP addresses?  If so, how did you do
>  it?

 In almost all of the firewall implementations, it's easily done, but is likely
 a bad idea for the same reasons black-hole lists for spam are a really
 bad idea.

 If you block a range, you block that range,
 tossing the baby with the bathwater.
 Mostly, it doesn't work, but seriously penalizes the innocent. 

-- 
Cowboy