Re: Question about blocking IP's

Thanks Robert for wonderful info. I believe my computer is configured
to use hosts.deny file. I have portsentry running and also in my
/var/log/messages there are lines like

Host 172.88.88.88 has been blocked via wrappers with string: "All:
172.88.88.88"

Do you think so?

Also in my var/log/messages there are lines like:

Attackalert: TCP/SYN/Normal scan from host: xx.xx.xx.xx to TCP port:
143
Attackalert: host: xx.xx.xx.xx has been blocked via dropped route using
command:
"/usr/local/bin/iptables -I INPUT -s xx.xx.xx -j DROP"

Also the hosts.deny file seems growing larger in time. Does portsentry
add the IP addresses to hosts.deny file? Please explain a little the
basics.

Thank you!

.