Anatoly Lubarsky Logo
programming, design, integration, games, music

Use Hardware Firewall to Block Spam

As I started to use dedicated hosting for my sites - I realized for sure that hardware firewall is the ultimate solution to prevent comment/referral/trackback spam. Social media common-used antispam solutions that exist are passive and lack of power. In the long run help escalating spam attacks and make them more sophisticated. All existing solutions try to fight against people while social media is dealing with sophisticated spam software solutions.


The cost of common antispam tactics

Common-used antispam solutions like:



are not effective in the long run and help escalating spam attempts. Spam comes from spam software. Common spam solutions just need a list of keywords and some ad content to be configured initially. Afterwards the machine is able to query search engines for keywords and flood the network with millions of spam attempts while the post requests come from various public IPs and proxies. When it gets http response 200 (nofollow, banned keywords and captchas) - the software believes the attempt was success and will continue and escalate its attempts to spam.


Get hardware firewall

Seems like no-win situation for the blogging world and social media solutions out there ? Not exactly. If it is possible try to get and configure hardware firewall to get rid effectively from comment spammers. It will help make your servers more secure and finish with spam. You will still need to add captchas or some other application-level antispam tactics but it would serve only as additional protection level.


How to configure firewall

I'll try to demonstrate how easy it is to ban thousands of spammy IPs with the help of hardware firewall (I use Cisco PIX Firewall). It is less trivial to get real spammers IPs and distinguish them from public proxies, but I will save this info for another post. Initial configuration (images are clickable):


  1. Create a group called something like "Banned group" for the "outside" network.
  2. Configure firewall hosts/networks. Put all suspicious IPs on the "outside" network:

    outside network

  3. Configure firewall access rules to deny traffic for this group via http, https:

    access rules

  4. That's it. Next time you want to ban some IP - add it to the "banned" group.

Related Posts:

Tuesday, March 27, 2007 7:10 PM

Login

Subscribe via RSS

Article Categories

.Net Framework
ASP.NET Tips
C# Win32 API
HTML, CSS, Web
Javascript Tips
MSSQL Tips
System
System.Net
WebServices

Archives

(02) January 2018
(01) June 2013
(03) March 2013
(02) February 2013
(01) July 2012
(01) April 2012
(01) September 2011
(01) August 2011
(03) May 2011
(01) December 2010
(01) November 2010
(01) October 2010
(01) June 2010
(01) May 2010
(02) March 2010
(01) January 2010
(02) December 2009
(03) September 2009
(03) August 2009
(09) July 2009
(04) June 2009
(03) May 2009
(02) April 2009
(03) March 2009
(02) February 2009
(02) January 2009
(04) December 2008
(04) November 2008
(05) October 2008
(04) September 2008
(05) August 2008
(04) July 2008
(05) June 2008
(07) May 2008
(04) April 2008
(03) March 2008
(02) February 2008
(03) January 2008
(03) December 2007
(05) November 2007
(04) October 2007
(05) September 2007
(12) August 2007
(11) July 2007
(14) June 2007
(13) May 2007
(13) April 2007
(10) March 2007
(11) February 2007
(14) January 2007
(14) December 2006
(12) November 2006
(08) October 2006
(09) September 2006
(06) August 2006
(08) July 2006
(10) June 2006
(09) May 2006
(22) April 2006
(25) March 2006
(12) February 2006
(14) January 2006
(19) December 2005
(17) November 2005
(16) October 2005
(16) September 2005
(12) August 2005
(14) July 2005
(09) June 2005
(12) May 2005
(12) April 2005
(20) March 2005
(11) February 2005
(12) January 2005
(18) December 2004
(13) November 2004
(12) October 2004
(14) September 2004
(09) August 2004
(23) July 2004
(19) June 2004
(29) May 2004
(19) April 2004
(16) March 2004
(09) February 2004
(06) January 2004
(02) December 2003
(01) November 2003

Post Categories

.Net and C#
Android
Antispam
App. Development
Architecture
ASP.NET
Blogging
Deprecated Projects
Facebook Platform
Fun
Google
iOS
Javascript
Misc.
MSSQL
Music
My Games
Performance
Roller
Social Networks
Tools
Visual Studio
Web 2.0
WebServices

About Me

linkedin Profile
Recs
Who am I

My Sites

Billy Beet
x2line blogs