Linux is like Cerberus, dog with many heads. You might be able to cut one head, but others will continue to work! Hmm, After thinking twice, *BSD is like three head Cerberus, FreeBSD, OpenBSD and NetBSD. Linux has much more than 3 heads.:)
I understand that this seems stupid when we are talking about wikipedia, but this is the law. Couple of years ago there was company or charity organization in Finland, who had fund raising campaign for kids with cancer. They gave 1% for kids and took 99% "collecting charges" for them self. Police didn't do anything, before Finnish media found it out and it was in television. Reporter who did the story got some award later.
I have personally gave 50 euros before for Wikipedia, so I might be some sort of criminal. This time I will just pass this fund raising, since I have gave my support already.
I know this is not the thing you originally asked, but I think you should consider whitelisting-software. You just set all programs which you need allowed and the rest of the programs are automatically denied. It is not antivirus and not firewall either, but it does the job which was your original problem.
>But the point is, the problem is a social one, not a technical one. I know you haven't had good results so far, but this needs to be fought in management, not in technology.
Exactly!
Technical people always try to find technical solution for the problem, where on the other company technical people try to understand what the he*l has been done and try to fix with different way.
Solution for your problem is: Talk with all the groups in all companies affected and make list of rules which you all will follow. Technical problems solve easily that way and they are not technical anymore. Make sure that you name responsible person for each company.
I'll just TARPIT those tries automatically after 6 unsuccessfull tries with fail2ban + iptables + TARPIT -module. This will make their connection last forever... at least almost:)
Too bad, just that I have not found working tarpit for the newest kernels yet...
Slashdot Mirror
Linux is like Cerberus, dog with many heads. You might be able to cut one head, but others will continue to work! Hmm, After thinking twice, *BSD is like three head Cerberus, FreeBSD, OpenBSD and NetBSD. Linux has much more than 3 heads. :)
I understand that this seems stupid when we are talking about wikipedia, but this is the law. Couple of years ago there was company or charity organization in Finland, who had fund raising campaign for kids with cancer. They gave 1% for kids and took 99% "collecting charges" for them self. Police didn't do anything, before Finnish media found it out and it was in television. Reporter who did the story got some award later. I have personally gave 50 euros before for Wikipedia, so I might be some sort of criminal. This time I will just pass this fund raising, since I have gave my support already.
I know this is not the thing you originally asked, but I think you should consider whitelisting-software. You just set all programs which you need allowed and the rest of the programs are automatically denied. It is not antivirus and not firewall either, but it does the job which was your original problem.
>But the point is, the problem is a social one, not a technical one. I know you haven't had good results so far, but this needs to be fought in management, not in technology.
Exactly!
Technical people always try to find technical solution for the problem, where on the other company technical people try to understand what the he*l has been done and try to fix with different way. Solution for your problem is: Talk with all the groups in all companies affected and make list of rules which you all will follow. Technical problems solve easily that way and they are not technical anymore. Make sure that you name responsible person for each company.
Thank God I don't have any Apple products, so I don't have their problems, like this one.
http://news.blogs.cnn.com/2012/08/14/mutant-butterflies-a-result-of-fukushima-nuclear-disaster-researchers-say/
I'll just TARPIT those tries automatically after 6 unsuccessfull tries with fail2ban + iptables + TARPIT -module. This will make their connection last forever... at least almost :)
Too bad, just that I have not found working tarpit for the newest kernels yet...