4 ms·
The question is: how are they doing this? My money is on internal BGP route announcements that blackhole twitter's IP address as this technique has been used f
by EthanHeilman 13y ago
The question is: how are they doing this?
My money is on internal BGP route announcements that blackhole twitter's IP address as this technique has been used for IP filtering in China and Pakistan and doesn't require any special equipment or overhead.
- xtacy 13y agoEither what you said, or installing drop rules on routers to drop traffic to any of Twitter's IP addresses. http://www.cisco.com/c/en/us/support/docs/ip/access-lists/26448-ACLsamples.html#denyftp http://www.cisco.com/c/en/us/support/docs/ip/access-lists/26...
- sgy 13y agoUnix-like operating systems commonly implement IP address blocking using TCP Wrapper, configured by host access control files: /etc/hosts.deny and /etc/hosts.allow
- yuubi 13y agoThe hosts.allow and hosts.deny files only affect incoming connections to services that read them (whether by being invoked through tcpd, or by otherwise using libwrap. You could prevent Twitter from connecting to your FTP service or whatever, but not prevent other users on your network from contacting Twitter.