> Seems that FW 'knock' feature doesn't work.
> I got my server heavily scanned these days from Romania, some >1000 hits,
> and I didn't see FW blocking it.
>
> Also, I couldn't add subnet to 'Blacklist' - is it not supported in the
> module?
>
For brute force password guessing attempts, it's pretty easy to install APF
with BFD to detect and block them.
http://www.rfxnetworks.com/apf.php
I set it to block incoming only and leave open port 81 for the GUI
http://www.rfxnetworks.com/bfd.php
----
Ken Marcus
Precision Web Hosting, Inc.
http://www.precisionweb.net