Re: TCP wrapper alternative?

2019-07-20 Thread Gustavo Rios
look at: http://cr.yp.to. Em ter, 9 de jul de 2019 às 16:52, Thomas Smith escreveu: > > Hi, > > I'm considering an option to evaluate connecting IPs before they're evaluated > by `pf` in order to make some decisions about the "reputation" of a > connecting IP. Then if that reputation is low

Re: TCP wrapper alternative?

2019-07-10 Thread Stuart Henderson
On 2019-07-09, Thomas Smith wrote: > Hi, > > I'm considering an option to evaluate connecting IPs before they're evaluated > by `pf` in order to make some decisions about the "reputation" of a > connecting IP. Then if that reputation is low enough, some action could > either be taken: in `pf`

Re: TCP wrapper alternative?

2019-07-10 Thread Peter N. M. Hansteen
On Tue, Jul 09, 2019 at 01:18:36PM -0700, Thomas Smith wrote: > > >> I'm considering an option to evaluate connecting IPs before they're > >> evaluated by `pf` in order to make some decisions about the "reputation" > >> of a connecting IP. Then if that reputation is low enough, some action >

Re: TCP wrapper alternative?

2019-07-09 Thread Torsten
] On Behalf Of Thomas Smith Sent: 09 July 2019 19:04 To: misc@openbsd.org Subject: TCP wrapper alternative? Hi, I'm considering an option to evaluate connecting IPs before they're evaluated by `pf` in order to make some decisions about the "reputation" of a connecting IP. Then if that

Re: TCP wrapper alternative?

2019-07-09 Thread Marc Espie
On Tue, Jul 09, 2019 at 11:03:36AM -0700, Thomas Smith wrote: > Hi, > > I'm considering an option to evaluate connecting IPs before they're evaluated > by `pf` in order to make some decisions about the "reputation" of a > connecting IP. Then if that reputation is low enough, some action could

Re: TCP wrapper alternative?

2019-07-09 Thread Peter Nicolai Mathias Hansteen
> 9. jul. 2019 kl. 20:03 skrev Thomas Smith : > > Hi, > > I'm considering an option to evaluate connecting IPs before they're evaluated > by `pf` in order to make some decisions about the "reputation" of a > connecting IP. Then if that reputation is low enough, some action could > either be

TCP wrapper alternative?

2019-07-09 Thread Thomas Smith
Hi, I'm considering an option to evaluate connecting IPs before they're evaluated by `pf` in order to make some decisions about the "reputation" of a connecting IP. Then if that reputation is low enough, some action could either be taken: in `pf` to protect the associated application (say by