Re: [nznog] Help block out China please.

On Dec 8, 2013, at 8:46 AM, Don Gould wrote:

Clearly you can't even put a quick and dirty box in place to just prove a concept without having to bolt it down.

Correct - it simply isn't viable to expose an unpatched/unsecured box to the Internet at all, due to all the automated scanning/hacking activities taking place. +1 to the other folks who recommended more workable solutions - 'GeoIP' isn't exact at all, and not all bad nodes (of any nationality) are in China. ----------------------------------------------------------------------- Roland Dobbins // http://www.arbornetworks.com Luck is the residue of opportunity and design. -- John Milton