[NBLUG/talk] denying specific hosts via bastille-based firewall?

[Daniel Smith]

What's a good way to drop certain IP addresses at
the firewall level, as opposed to bouncing them
from Apache?

I have a bastille-based firewall on my colo box.
I'm seeing things in my httpd access log that make me want
to punt certain static IP addresses entirely.  Just
trying to get a sense of how this is usually handled.

Daniel

-- 
Daniel L. Smith - Sonoma County, CA - AIM: SonomaDaniel
JavaJoint.com   - daniel.org        - ThereAndThen.org