[135206] in North American Network Operators' Group
Auto ACL blocker
daemon@ATHENA.MIT.EDU (Brian R. Watters)
Tue Jan 18 14:12:19 2011
Date: Tue, 18 Jan 2011 11:12:12 -0800 (PST)
From: "Brian R. Watters" <brwatters@absfoc.com>
To: nanog@nanog.org
Reply-To: "Brian R. Watters" <brwatters@absfoc.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
We are looking for the following solution.
Honey pot that collects attacks against SSH/FTP and so on
Said attacks are then sent to a master ACL on a edge Cisco router to block all traffic from these offenders ..
Of course we would require a master whitelist as well as to not be blocked from our own networks.
Any current solutions or ideas ??
--
BRW