Blocker settings questions

Posted: Fri Feb 04, 2005 7:29 pm

In the Configuration menu, when setting a blocker type on, there are a few settings I'd like opinions on.

IP Block Type: Which is the best setting? Complete IP or 1 octet?

Email IP lookup: What is the difference between ARIN.net and DNSSTUFF.com and which is the better choice? Or is it best to leave this off?

Write to htaccess: Why would I want to write to this file if the SQL table is recording the information?

I am new at using Sentinel, so I'd like to hear what you experienced users have found works best.

Thanks! Cheers

Site Admin/Owner Joined: Aug 27, 2002 Posts: 17088

I usually use 1 octet as that most often covers it, for me.

DNSSTUFF gives more thorough information. You can get it from Arin but you have to do it manually.

IP's blocked in .htaccess never make it to your site. It is blocked at the server level.

Posted: Sat Feb 05, 2005 10:24 am

Thank you for the reply. Especially the part about .htaccess. I never would have known that. Now that I know it, I will activate that setting.

Also, I was thinking the 1 octet might be better, but wasn't certain. I will change mine there also.

Now, as to arin vs dnsstuff. As I understand what you stated, if I choose arin, I need to do the lookup manually? And with dnsstuff it does it automatically? I thought it would be the opposite. Interesting.

Thank you! Smile

Posted: Sat Feb 05, 2005 11:09 am

I now have one additional question.

Is there any reason why NOT to set the Block Duration to Permanent???

Posted: Sat Feb 05, 2005 11:43 am

One reason time expiring becomes more vital is if you choose to block the entire IP range opposed to blocking the specific IP address. We really don't want to block all COX High speed users or all AOL users for ever. (Well maybe AOL wink*).

But yeah the number of attacks on my sites have never been hard to manage with a permanent setting.

Posted: Sat Feb 05, 2005 11:59 am

They both look up the initial IP. However, some IP's have to have further assignments. DNSStuff drills on down. Arin does not.

Posted: Sat Feb 05, 2005 2:33 pm

Thank you for the responses. Helps makes users like me more responsible users of Sentinel as we better understand the logic behind the settings.