Lets shutdown the internet by options

its useless to have my services open to the world. I'm just being attacked or exposed. So lock down only to local or selective country by using inetd deny.hosts all:all and hosts.allow whatever needed only. IPs is too much and they change a lot. Do I expect to sell or buy from .ar or .cn.com. No! Just block the whole thing. IPs with no proper reverse should be denied access all together. We'll save millions of ipv4 addresses too. Reuse some with proper routing.


A Pretty Please (even with a cherry on top) to developers as to compile with tcp-wrappers all services, and finally have some easy access over the network.

Your honest aging BOFH

IPv4 vs IPv6

We ran out of ip space. I still believe that there is a lot of unused IP space, allocated to companies, thats not needed. ipv6 should be released and must be employed. BUT. Unless there are low end /cost routers and firewalls available and a set of tools to manage huge amounts of addresses for white listing  and blocking, ipv6 should never be set in use. Currently all user -not always that friendly- iptables type utilities cannot handle the massive info entries of ipv6. RDBLs should meet the initial load pretty fast and home routes must be designed with a whole new perspective.
Taking freedom of the net, every isp should be able to run a multi-service rdbl like -central fed- for the home router of their users, including the protocol /service to allow or block. That is much more than a google summer code project, and above the opendns implementation. Thats bad ass filtering. Needed for the legit user.
[ unfortunately, internet cannot regulate itself, because the ISPs do not have imagination and know-how. The only thing they do, by law, is keep a copy of your emails, anything using port 25, for a few years 2 or 3 in EU, 3-5 in US, probably forever in china]

I dont believe that is going to be easy. On contrary we'll be back to the 90's where even the idea of an spf record or dnssec (still with loopholes) had not emerged. I see havoc for small companies and a mess on the net.


IPv6 if needed now, needs to be funded heavily as to be ready within the next 6-10 years.

just my 2 cent.-

To all chinese assholes, european wonna-be crackers, and rest of the script kiddies

To all chinese assholes, european wonna-be crackers, and rest of the script kiddies

my firewall is open only on ports 21,25,80,110

my servers are controlled by non recursive dns, i'm feeding my client net through opendns

ftp user/pass != smtp/pop3/imap user/pass != user accounts => non O.S. Integrated

user/pass is attached to a postoffice name keeping it slightly different (descriptive) than the actual domain name

so

brute force attack will get you nowhere, but waste bandwidth. Fail2ban is an excellent product by the way. Nails you down on your feet within a few moves.

You are simply forcing internet 2.0 where freedom does not exist or simple people cannot have. That's you!

If you think you make a living by cracking and spamming, think again. When they throw the book at you or your country, I'll be there to applaud. I can see it now. Chinese and Brazilians having their own routed closed net than the developed countries where they try to sell their stuff.

I've blocked segments even from russia that I had too much of their bride-selling ads. When I block, its for all my clients, all the companies. Thats a lot of people. Not just my pc. To give you a hint, I haven't had a virus on my networks for the past 7 years. No botnets, no rootkits and over 50% of ubuntu workstations (some web servers too) at the user desks. China and brazil are over 50% ip blocked. Even your legit sites. Simply not trusted.

Crack something with a significance. Not just be, petty lowlife thieves.

Why MAC sucks good

It took me a few years to figure it out. Its funny also that M$ has
announced that since ΣVista, its a MAC experience for the user.
Here goes... M$ needs a format every now and then to remove garbage
collected over the years. Personally, I never format cause I consider it
a way out for the ignorant. I costs me huge 'amounts' of hours to have
M$Win running without a format. MY CHOICE!
Well an OSX is the same thing. They are giving their users, the close
to REGISTRY and garbage, windows experience.
From all the OS'es in the world of the past, those guys never employ
an engineer who has experience with alternate platforms? Wherer problems
like this are solved. Or at least make them as simple to get rid of as
in Ubuntu !!!

Φορολογικοί Μηχανισμοί

1. Γιατί η εγκατάσταση γίνεται και τρέχει μονο με admin λογαριασμό?
2. Γιατί δεν θέλει κανένας (πωλητής, γιατι ο πελάτης θέλει) να βάλη δικτυακό φορολογικό μηχανισμό?
3. Γιατί συνοδεύεται απο λογισμικό εποχής WFW3.1?

Οι χρήστες μου ειναι περιορισμένοι για να μην φορτώνουν ιούς και μου κάνουν την ζωή αφόρητη. Ερχεται ο τύπος με την εμπορική διαχείριση και κάνει τον εκδότη τιμολογίων Administrator στο σύστημα, και ολοι βλέπουν τσόντες, παιζουν στοιχήματα και συγχρονίζουν το κινητό τους στο πισι του !!!

Βάζω φυσικά λογισμικό (πχ opendns) για να αποκλείσω πρόσβαση στο διαδίκτυο και αλλάζω gateway στον dhcp, αλλά και πάλι την τοπική εγκατάσταση και βλακεία στο μηχάνημα της δουλειάς δεν μπορώ να την σταματήσω.

Οπου εχω καταφέρει να μπή δικτυακός δεν εχω πρόβλημα. Δεν μου δεσμέυει σταθμό, οι χρήστες ειναι  locked down και ολα ειναι ρολόϊ. Για να βρεις εταιρεία να βάζη δικτυακό, πρέπει να φτιάξης φανουρόπιτα.

Μην πω ποσο βολικο ειναι το δικτυακό με τον αριθμό των αρχείων σε σταθμό vs σερβερ, για την ευκολια των backup κλπ κλπ.

Φτιαχνεις την ασφάλεια της μηχανογράφησης, και έρχεται ο κάθε πικραμένος να σου δημιουργήσει κερκόπορτα στο δίκτυο.
Τι να προτείνω στην εταιρεία των 300.000 τζίρο. Να βάλη SAP? γιατι οι εταιρειάρες με τα λογισμικά τους δεν ξέρουν 5 βασικά πράγματα? η μήπως τα παιδάκια που στέλνουν για την εγκατάσταση?

Εν μέσω κρίσης, οι εγκαταστάσεις συνεχίζονται και η ζωή επίσης. Αντε τώρα να βρω ΧΡ γιατι τα 7άρια δεν εχουν κάτσει και πολύ καλά σε επαγγελματικό περιβάλλον. (στο σπιτι βαρας και μερικά restore/format, ουτως η αλλως wow παιζεις).