Best way to block specific external IP addresses

I'm using an ASA also and I've been blocking IPs for some time now and it has really tapered off ( now I'm just watching the "hit" counters tick up) - I check the geographic location of the offending IP and if it is from a region of the world that we wouldn't interact with anyway, I block the entire range of IPs... mostly China and Korea and Russia. Fast forward several months and I rarely block an IP any more as most of the offending IPs have already been blocked. Of course this strategy won't work for everyone.
Any way you accomplish this task is going to require you to add the addresses as they pop up on your radar so I don't see how GPO will make your life easier, you'll want to block at the perimeter anyway.

Every week we get a list of known  Malware IP addresses. My boss wants me to block these addresses so I was wondering what the best way to do this would be. We have a Cisco ASA and I know I could create a network object for each IP addresses and select block all access. But is that the best way. I think another option might be with a GPO and a hosts file. Any other ideas. There are usually 30-50 IP addresses listed at least every week. Any other ideas or a better way to accomplish this? Thanks.
This topic first appeared in the Spiceworks Community

Similar Messages

  • I am moving from PC to Mac.  My PC has two internal drives and I have a 3Tb external.  What is best way to move the data from the internal drives to Mac and the best way to make the external drive read write without losing data

    I am moving from PC to Mac.  My PC has two internal drives and I have a 3Tb external.  What is best way to move the data from the internal drives to Mac and the best way to make the external drive read write without losing data

    Paragon even has non-destriuctive conversion utility if you do want to change drive.
    Hard to imagine using 3TB that isn't NTFS. Mac uses GPT for default partition type as well as HFS+
    www.paragon-software.com
    Some general Apple Help www.apple.com/support/
    Also,
    Mac OS X Help
    http://www.apple.com/support/macbasics/
    Isolating Issues in Mac OS
    http://support.apple.com/kb/TS1388
    https://www.apple.com/support/osx/
    https://www.apple.com/support/quickassist/
    http://www.apple.com/support/mac101/help/
    http://www.apple.com/support/mac101/tour/
    Get Help with your Product
    http://docs.info.apple.com/article.html?artnum=304725
    Apple Mac App Store
    https://discussions.apple.com/community/mac_app_store/using_mac_apple_store
    How to Buy Mac OS X Mountain Lion/Lion
    http://www.apple.com/osx/how-to-upgrade/
    TimeMachine 101
    https://support.apple.com/kb/HT1427
    http://www.apple.com/support/timemachine
    Mac OS X Community
    https://discussions.apple.com/community/mac_os

  • Best way to use an external drive

    Hello all,
    I have several photos.
    I also have three computers that I regularly use: my Windows PC, my Macbook Pro, and a very new iMac.
    Rather than place all my photos on each computer... I thought I could place them on a Western Digital Passport portable ext. drive. Then somehow use the drive from computer to computer to edit/play with my photos.
    How do I best use iPhoto 08 to do that? I'm not sure... do the photos have to be on the computer in order to make albums, libraries, folders, etc? Or are those things more of thumbnails that POINT to certain files?
    Please help a newbie understand the best way to use his external drive.
    Thanks for any and all help!

    Hello, and welcome, Theodore!
    I must first say that I don't yet have iPhoto 8.
    I do, however, have a lot of experience with external drives (I have two). I have a huge amount of music in iTunes, so I keep a copy of it on each external drive. Then, when I need to access my music , I turn on either external drive, up comes the External Drive symbol on my display, then I go over to my dock, and select iTunes. I must remember to first open up the External Drive BEFORE I open iTunes (or iPhoto). I then add or subtract music (or photos), edit, and work on my collection. When I'm finished, I just close the application, then select the Hard Drive symbol, and choose File/ Exit Hard Drive. Reach over and turn off my Hard Drive, and it's all good. I just always remember to open the Hard Drive FIRST, before opening the application.
    The same would work for iPhoto. If you place iPhoto onto your external drive, you could probably use any of your computers to connect to it. I would suggest you think about backing up your external drive's contents with either another external drive (which was my choice), or other alternate storage methods.
    I only have one PowerBook, not multiple computers, but, other than that, the situation's the same. You want to keep your iPhoto collection off your computers, and onto one external drive. I hope this information can be of some help to you.
    All best wishes... Cea

  • What is the best way to make a list of addresses for envelopes or labels?  Address book, numbers or pages?

    What is the best way to make a list of addresses for envelopes and labels?  Address book, Pages or Numbers?

    I liek your idea of having multiple images in a grid. I think
    that would be the best bet as you mentioned. Having one big picture
    would be hard to distinguish the sub-areas with mouse coordinates.
    I think checking the coordinates for the mouse would be very
    tedious because I would have to check for the left boundary, the
    right, top, and bottom for each sub-area!
    What do you mean by using button components and reskinning.
    Is this simply using buttons and changing the way they look? I'm
    just trying to save time and memory, because if I had a 10 by 10
    grid, thats a hundred buttons. Wouldn't that slow down the machine
    alot? And for that matter wouldn't having a grid of 10 by 10 images
    also by the same deal?
    Thanks for the input, I'm just trying to find the most
    efficient way to do it.

  • Best way to block multiple logins/same user ?

    What is the best way to block/prevent someone from logging in more than once at the same time with the same userID?
    I was thinking to post to a database whenever a user logs in/out but then every time a user does this there has to be a database call to see if that user is already logged in. This solution doesn't seem to efficient or maybe it is.?? Anyone with a better solution?

    I'm not sure what you mean. A user will log in, the form data will be authenticated against the db data, credentials will be stored in the session if authen was a success and sent back to login page if otherwise. I am imagining that I can put a flag field in the database LOGGED_IN with Y or N. So when user successfully authenticates I can insert a Y in the user's LOGGED_IN field and when the session gets destroyed insert a N. Does this answer your question?

  • Is there a way to block an e-mail address from texting me?

    Is there a way to block an e-mail address from texting me?

    http://lmgtfy.com/?q=ios+block+imessages

  • Best way to block a large list of IP addresses

    I'm in the process of taking further steps to protect my home Web / SSH server from malicious attacks. The next thing I'd like to try doing is block a large list of known malicious IP addresses that I have listed in a text file.
    I followed the Arch Wiki and set up a simple stateful firewall using iptables, but now I'm a bit stuck...
    I tried using a little bash script to tell iptables to block all of the addresses in the list. It seemed clunky since it takes about 30 seconds for the script to run. Also, I'm not even sure where the best place would be to run the script in Arch Linux.
    I considered saving all of those blocked IP addresses in my actual iptables settings file, but I feel that would make it difficult for me to easily download and use a new list of malicious IP addresses.
    I looked into some other firewall applications. None of them seem to have the simplicity of iptables, but I may just be uneducated on the topic.
    So... Does anyone have a suggestion for easily blocking a large list of malicious IP addresses on my home server? Is it feasable to do with iptables? Should I use a different firewall application? Is it even worth it, security wise, to block these addresses?
    Thank you.

    Thank you for the suggestions. I like the how ipset is a software companion to iptables, so I decided to use that.
    ...and OH BOY has it been hard to grasp. I think I got it, though.
    Ok, so I have iptables loaded in my DAEMONS array. I created the directory "/etc/ipset/deny/" which now contains five files filled with lists of naughty IP addresses from here. I then created the script "/etc/ipset/init-deny" like so:
    #!/bin/bash
    # Create a set of naughty IP addresses
    ipset create denyset hash:net -quiet
    # Add the addresses to the set
    for ipaddress in $(egrep -h -v -E "^#|^$" /etc/ipset/deny/*); do
    ipset add denyset $ipaddress -quiet
    done
    # Tell iptables to ignore all addresses in the set
    iptables -I INPUT -m set --match-set denyset src -j DROP
    and call it from "/etc/rc.local". I think it works. (I can't ping any naughty addresses anymore) I think the only part I couldn't really understand was the match set line: whether I should use "--match-set denyset src" or "--match-set denyset src,dst".
    I'd love anymore feedback about this setup, especially in regards to where would be the proper place to load the ipset commands. "/etc/rc.local" just feels clunky.
    ...also, FYI, for some reason the Arch Linux forums IP address (176.9.18.112) is totally in that guy's list of "exploited" IP addresses.

  • Best way to backup to external HD

    i know this topic has been extensively discussed previously, so my apologies as i couldn't find anything to specifically answer my question.
    I’m wondering what the best way to backup my files would be. I just bought an external 80 gig WD hard drive, and I’d love to know if there’s any better way than to just drag & drop my music, movie, picture, and document folders onto this every so often…if it’s 3rd party software you recommend, I’m a starving student so I’d prefer to not spend a lot of money.
    Also, should I partition the external hd so that I can boot from tiger in case of an emergency? And how would this be done?
    thanks in advance for any information that can be provided. This forum is such a great resource to the apple community, so for all you problem solving posters, YOU’RE AWESOME.

    There's really only the drag and drop method if there are programs for transfer it's undoubtedly a rip off. Also I wouldn't partition your drive so it'll be less cluttered.
    But if you're concerned about speed here's a few ideas: you can put all your files into a folder and that may improve speed [similar to burning to disk it apportions file size correctly].
    Also get a really good short FW/USB cord if you can. I use a 3ft M-Audio and it's very good.
    Good Luck

  • What's the best way to safely eject external backup drive

    I just bought a new Seagate external drive and made my first backup. Their website said the best way to disconnect it is to drag the desktop icon to the trash. I apparently ruined my previous backup drive (Adata) by right-clicking and selecting "Eject" from the context menu. This same "Eject" option is available for the Seagate drive and I read on this forum that it's a safe way to disconnect the drive. However, after using my Adata drive for a couple of years and getting frequent warnings saying the it hadn't been ejected properly after the previous backup, last week it just wouldn't work anymore and backups simply failed. So I'm not feeling confident about how to safely disconnect my new hard drive... Thanks for any advice.

    Things can happen to drives after a few years of year of use, even if the hardware itself is OK. The directory structure can get corrupted, etc. Choosing "eject" rather than dragging the icon to the trash isn't going to make a difference. I think Seagate tells users to do it because it's perhaps the simplest, most obvious method. Disk Utility can usually fix minor problems with your directory structure or volume info.
    One problem with external drives is that some external enclosures are a lot better than others. So a drive can seem to be failing when in fact the enclosure itself has a problem. It's a good idea to have a spare dock or enclosure on hand to test for this possibility. A spare known-good cable is something else to keep in your "toolkit".

  • OK, what is the best way to lower specific frequencies in edit view

    Listen guys, yes I do happen to know about "frequencies" and that you can't fully remove an instrument without effecting another in that same file that plays at the same time, this is pretty basic stuff.
    However, partially removing frequencies is one of the main things AA3 is intended for: "editing" the sound is it's main function.
    There must be some better answers out there about the best way of going about this in AA3.
    Do people use the spectral analysis with the different colors representing different frequencies? I have no idea how to use this.
    Do most people not get into this type of stuff?  I don't get it, seems like this is what the program was designed for (partially) so there must be more techniques out there.

    As mentioned, using the Graphic EQ or Parametric EQs, are the most common tools to adjust the energy around specific frequencies.
    The Graphic EQ provides between 10-30 bands and uses fixed values and widths.  (A slider for 1000 Hz will adjust the sound around 1000 Hz +/- a few hundred Hz in both directions.)
    The Parametric EQ offers fewer bands, but allows for greater control over the frequencies being adjusted and the affect on surrounding frequencies.
    The Notch Filter allows very tight, specific adjustments and is best used for removing artifacts like a 50/60Hz hum or high-pitched buzz.
    Spectral Frequency View makes it easy to see the frequency patterns and find precise frequencies of problem audio.  The editing tools allow you to perform many of the same functions mentioned, but visually in a paint-style application.  The frequency range of the file is displayed vertically, with 1Hz at the bottom and 22KHz (for a 44.1K file) at the top.  Each column represents a particular slice of time and displays the energy level of each frequency band via brightness and color.  The brighter a particular blob is, the louder that frequency range is at that particular point in time.
    There are other spectral views that give different viewpoints of your audio.  For example, the Spectral Pan Display shows a sort of birds-eye view of the audio's stereo-field.  Instruments that are panned further to the left, for example, will display brighter blobs on the left.  Using the selection tools, you can isolate these sounds from the rest of the stereo field and remove, copy, or add effects to the selection without affecting the rest of the audio.

  • Is it possible the RV320 block some external ip address only to some IP on my LAN ?

    Hello,
    i have been blocked in firewall rules some external IP address but it will applied for all computers on LAN.
    I would to know if is possible do it for only group of ip or vlan?
    Thank you,
    Raphael Guarita

    Raphael.
    When you select the Source and Destination address you should be able to select Range. There is no option to select a VLAN.
    http://www.cisco.com/c/dam/en/us/td/docs/routers/csbr/rv320/administration/guide/en/rv32x_ag_en.pdf
    - Marty

  • Best way to write specific information to a file

    Hi there,
    I'm looking to write specific information from my program to 2 separate files.
    Before the program runs, it asks the operator for their info (name, password, run ID #, a couple safety checkboxes).
    So, I would like the first file to record log-in information (i.e. The operator's name, the date and time they accessed the program, and the Run ID #) all in a spreadsheet.
    I would like the second file to record data from the different components of the program ( 2 tank levels, a flow meter, and run ID #) in another spreadsheet.
    Any thoughts on the best way to do this? I've looked at using arrays to organize the info/data, and then write to spreadsheet, but I haven't quite figured it out...
    Thanks,
    Daryn

    For the first, you could convert everything to strings, then send an array of strings. For the second, just send an array of numbers.
    Cameron
    To err is human, but to really foul it up requires a computer.
    The optimist believes we are in the best of all possible worlds - the pessimist fears this is true.
    Profanity is the one language all programmers know best.
    An expert is someone who has made all the possible mistakes.
    To learn something about LabVIEW at no extra cost, work the online LabVIEW tutorial(s):
    LabVIEW Unit 1 - Getting Started
    Learn to Use LabVIEW with MyDAQ

  • Best way to import from external drive that I'm loading LPs on

    I'm transferring many LP's to an external hard drive as MP3 in a LP folder.
    #1 - What's the best way to import into iTunes and still keep my original file where it is as well as have a copy in iTunes? Would I just import each song individually or could I add folder? I do have the setting checked for copying song to itunes. Just not sure if I should import or add?
    #2 - Is there a way to import into iTunes as AAC or do I have to import original MP3 and then convert to AAC? When I do this and try to delete the MPEG-3 songs from iTunes.. I'm somehow also deleting my original MP3 file that's in the LP folder. I believe this pertains to what I'm doing in question #1

    None of the above.
    There's no importing involved. All you do is open the v6 Library with 09. It will then update the Library, preserving all your work. As always, back up first.
    To move an iPhoto Library to a new machine:
    Link the two Macs together: there are several ways to do this: Wireless Network, Firewire Target Disk Mode, Ethernet, or even just copy the Library to an external HD and then on to the new machine...
    But however you do choose to link the two machines...
    Simply copy the iPhoto Library from the Pictures Folder on the old Machine to the Pictures Folder on the new Machine.
    Then launch iPhoto. That's it.
    This moves photos, events, albums, books, keywords, slideshows and everything else.
    Regards
    TD

  • Best way to migrate iTunes, iPhoto, iCal, Address Book to Mac?

    I have been a user of Macs since 1985, but my wife has always used Windows (and before that, MSDOS).
    I have now gotten for her a new MacBookPro and would like suggestions on the best way to migrate the data needed to sync her iPhone with the new Mac.
    Currently, her contacts and calendar are in Microsoft Outlook for Windows, her photos are in some kind of Windows program and her music is in iTunes for Windows.
    What is the smoothest, easiest way to migrate these Windows files into a Mac format so she can use iCal on the Mac for her calendar, Address Book for contacts, iPhoto for pix and transfer her music from iTunes/Windows to iTunes for Mac?
    Is there any way to just sync the new MacBookPro with the iPhone and have it upload the data from the iPhone to the Mac????
    Just lookin' for the easiest way to do this....

    Have the Apple Store do this for you or call Apple support and they will help you do it.

  • Is Time Machine the best way to backup two external drives?

    I only have the most basic understanding of Time Machine.  I hook up an external drive to my MacBook Pro, click "backup now" on Time Machine, wait a while, and forget about it because I've never had to use it to retrieve a file - thank heaven.
    Now I also have two external 2TB portable drives that are close to full and which need to be backed up.  I just bought a 4TB drive that I haven't taken out of the box yet.  Is it a simple matter to create two Time Machine files on the 4TB drive ... one for each of the 2TB drives?
    And is Time Machine the best way to do this?  Or is there some other system that makes more sense for backing up on this scale and with two drives?
    -JOHN

    No Time Machine is not the only way.
    You can use one of the drive cloning softeare programs to clone your internal drive to an external or you can use OS X Disk Utility to do basically the same thing, IE Clone/Copy your internal drive to an external.
    But in your case it look as if the upgrading of the iPhoto database has wiped out alll your images. What you are actually asking about is "Can you now get back those photos without first doing any backup of any type".
    And the answer to that is No you can not.

Maybe you are looking for

  • How to select from list of values?

    Dear All, I am using XML publisher for word, where I need to select a value from a list of values, for example I have hotel code like TTAG,TOBBR,TTAG,TOTM now I need to select hotel code and the corrosponding data should be display on word after runn

  • How to get iTunes to stop autodownloading videos?

    I have several videos I have never downloaded to this PC. In iTunes I've marked all the movies and tv shows as watched. I've gone to preferences and unchecked "Automatically check for available downloads" and "automatically download prepurchased cont

  • EPMSaveComment after EPM Insert Member does not work?

    Hello, I have situation in report where I use EPM Insert Member and also EPMSaveComment. After new members are inserted, existing comments are blanked and Save data after that update exsisting comments with blank values Detail steps: Open Excel and l

  • What is Pre delivered content in SAP XI context ??

    1. What is Pre delivered content in SAP XI .Can some one clearly explain this. 2. Why should a customer move from an existing middleware (webMethods) to SAP XI.What cud be the strong reasons possible. Regards, Nandini

  • Logic Express 9 Uprgrade: MAJOR MISTAKE!

    Hey everyone, I feel really dumb, but I accidentally bought the Logic Express 9 upgrade instead of Logic Express 9. I didn't realize this until I had opened it and tried to register the disc. I do not have and previous version of Logic, all I have is