sunruh

i got hit a few times from 211.108.60.203

so i do a whois and find out more korea fun.

i then look at my iptables entries for korea.

i have the following:

(root on pts/3@yyy.net) (/etc/sysconfig)
> iptables -nvL | grep 211 | grep 104
0 0 DROP all -- * * 211.104.0.0/13 0.0.0.0/0

now a 211.104.0.0/13 will kill all up to 211.111.255.254

so 211.108 should easily be in that range.

so HOW did i get any attacks at all?