Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.python > #46050

Re: Python Magazine

References (8 earlier) <roy-3B69E7.21544325052013@news.panix.com> <8f19e20c-4f77-43dc-a732-4169e482d2b2@googlegroups.com> <BLU176-W1954E65198FBD15D34EFCBD7950@phx.gbl> <CAPTjJmpQLO+=reaKMHLTx0YsJ5BN0iNZiyeJG6MTE1PYa_gQ6g@mail.gmail.com> <BLU176-W14311D85344D3ED6CC31FBD7950@phx.gbl>
Date 2013-05-26 15:17 +1000
Subject Re: Python Magazine
From Chris Angelico <rosuav@gmail.com>
Newsgroups comp.lang.python
Message-ID <mailman.2167.1369545433.3114.python-list@python.org> (permalink)

Show all headers | View raw

On Sun, May 26, 2013 at 3:00 PM, Carlos Nepomuceno
<carlosnepomuceno@outlook.com> wrote:
> ----------------------------------------
>> Date: Sun, 26 May 2013 14:31:57 +1000
>> Subject: Re: Python Magazine
>> From: rosuav@gmail.com
>> To: python-list@python.org
> [...]
>> I expect that IP blocks will be upgraded to /64 block blocks, if that
>> starts being a problem. But it often won't, and specific IP address
>> blocks will still be the norm.
>>
>> ChrisA
>
>
> Blocking a whole network (/65) is totally undesirable and may even become illegal.

Blocking a /64 is exactly the same as blocking a /32 with NAT behind
it. And how could it be illegal? I provide service to those I choose
to provide to.

> Currently it may not only happen at the target of the DDoS attack, but be spread all over the internet where block lists are enforced.
>
> I don't expect that to happen and if it happens I'm surely in favor of protection against this type of 'solution' because it will block not only malicious clients but potentially many other legitimate clients.

Banning a wide netblock is of course going to lock out legit clients.
But IP rotation means that can happen anyway. You block a single IPv4
address that right now represents an abusive user; that user
disconnects and reconnects, gets a new IP, and someone else gets the
other one. Can happen all too easily. That's why IP-banning is at best
a temporary solution anyway.

ChrisA

Back to comp.lang.python | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Python Magazine DRJ Reddy <rama29065@gmail.com> - 2013-05-24 20:19 -0700
  Re: Python Magazine Roy Smith <roy@panix.com> - 2013-05-24 23:35 -0400
    Re: Python Magazine DRJ Reddy <rama29065@gmail.com> - 2013-05-24 20:38 -0700
    Re: Python Magazine Chris Angelico <rosuav@gmail.com> - 2013-05-25 13:48 +1000
      Re: Python Magazine DRJ Reddy <rama29065@gmail.com> - 2013-05-24 21:11 -0700
      Re: Python Magazine zoom <zoom@yahoo.com> - 2013-05-25 08:38 +0200
        Re: Python Magazine Chris Angelico <rosuav@gmail.com> - 2013-05-25 16:41 +1000
          Re: Python Magazine Steven D'Aprano <steve+comp.lang.python@pearwood.info> - 2013-05-25 14:29 +0000
            Re: Python Magazine Roy Smith <roy@panix.com> - 2013-05-25 11:30 -0400
              Re: Python Magazine John Ladasky <john_ladasky@sbcglobal.net> - 2013-05-25 18:28 -0700
                Re: Python Magazine Roy Smith <roy@panix.com> - 2013-05-25 21:54 -0400
                Re: Python Magazine Chris Angelico <rosuav@gmail.com> - 2013-05-26 11:58 +1000
                Re: Python Magazine Steven D'Aprano <steve+comp.lang.python@pearwood.info> - 2013-05-26 04:03 +0000
                Re: Python Magazine Chris Angelico <rosuav@gmail.com> - 2013-05-26 14:37 +1000
                Re: Python Magazine John Ladasky <john_ladasky@sbcglobal.net> - 2013-05-25 20:04 -0700
                Re: Python Magazine Roy Smith <roy@panix.com> - 2013-05-25 23:24 -0400
                Re: Python Magazine Chris Angelico <rosuav@gmail.com> - 2013-05-26 13:45 +1000
                RE: Python Magazine Carlos Nepomuceno <carlosnepomuceno@outlook.com> - 2013-05-26 07:01 +0300
                Re: Python Magazine Chris Angelico <rosuav@gmail.com> - 2013-05-26 14:31 +1000
                RE: Python Magazine Carlos Nepomuceno <carlosnepomuceno@outlook.com> - 2013-05-26 08:00 +0300
                Re: Python Magazine Chris Angelico <rosuav@gmail.com> - 2013-05-26 15:17 +1000
                Re: Python Magazine DRJ Reddy <rama29065@gmail.com> - 2013-05-31 04:11 -0700
                RE: Python Magazine Carlos Nepomuceno <carlosnepomuceno@outlook.com> - 2013-06-01 11:15 +0300
                Re: Python Magazine DRJ Reddy <rama29065@gmail.com> - 2013-06-05 00:37 -0700
                RE: Python Magazine Carlos Nepomuceno <carlosnepomuceno@outlook.com> - 2013-06-05 15:20 +0300
                Re: Python Magazine DRJ Reddy <rama29065@gmail.com> - 2013-06-05 09:17 -0700
                Re: Python Magazine Chris Angelico <rosuav@gmail.com> - 2013-06-06 03:52 +1000
                Re: Python Magazine DRJ Reddy <rama29065@gmail.com> - 2013-06-05 22:01 -0700
                Re: Python Magazine Mark Lawrence <breamoreboy@yahoo.co.uk> - 2013-05-26 04:20 +0100
                Re: Python Magazine Steven D'Aprano <steve+comp.lang.python@pearwood.info> - 2013-05-26 03:50 +0000
                Re: Python Magazine 88888 Dihedral <dihedral88888@gmail.com> - 2013-06-01 08:08 -0700
  Re: Python Magazine Mark Janssen <dreamingforward@gmail.com> - 2013-05-24 20:38 -0700
    Re: Python Magazine DRJ Reddy <rama29065@gmail.com> - 2013-05-24 20:41 -0700
  RE: Python Magazine Carlos Nepomuceno <carlosnepomuceno@outlook.com> - 2013-05-25 06:43 +0300
    Re: Python Magazine DRJ Reddy <rama29065@gmail.com> - 2013-05-24 21:10 -0700
      RE: Python Magazine Carlos Nepomuceno <carlosnepomuceno@outlook.com> - 2013-05-25 07:22 +0300
      Re: Python Magazine Chris Angelico <rosuav@gmail.com> - 2013-05-25 14:25 +1000
        Re: Python Magazine Roy Smith <roy@panix.com> - 2013-05-25 11:24 -0400
          Re: Python Magazine Chris Angelico <rosuav@gmail.com> - 2013-05-26 01:30 +1000
          RE: Python Magazine Carlos Nepomuceno <carlosnepomuceno@outlook.com> - 2013-05-25 20:28 +0300
  Re: Python Magazine Michael Poeltl <michael.poeltl@univie.ac.at> - 2013-05-25 07:29 +0200
  Re: Python Magazine Daniel <danielrr2@gmail.com> - 2013-05-25 16:56 +0200

csiph-web