* on the Tue, Jul 23, 2002 at 08:05:54PM +0100, philip bridge wrote: > It is actually easy to set up and maintain. Resolve the IPs, set > up a blackhole to null0 in a core router and distribute a BGP host > route to the blackhole throughout the network. No problem to set > up and maintain - just check if the offending sites are still > active once a week or so. Because it is configured in one place > only there isn't much danger of the filters getting forgotten.
Exactly what happened here. > ># ping www.3ivx.com > >PING 3ivx.com (207.228.238.29): 56 data bytes > >36 bytes from filter-for-online-gambling-sites-and-RFC1918-addr.zrh1.ch. > >colt.net (212.23.224.56): Destination Host Unreachable It took me five minutes to make them unblock this; but they still cling to filtering gambling-sites, because some dork of lawyer told them they'd be on the safe side. Of course, one could sue them for not blocking *one* single casino, because since they block, they are obviously responsible for any illegal content in the whole world. Cheers Seegras -- Those who give up essential liberties for temporary safety deserve neither liberty nor safety. -- Benjamin Franklin ---------------------------------------------- [EMAIL PROTECTED] Maillist-Archive: http://www.mail-archive.com/swinog%40swinog.ch/
