Is a simple method of blocking a particular domain name or IP address set available
On 17/05/2018, Colin Watson <cjwatson at ubuntu.com> wrote:
> On Thu, May 17, 2018 at 10:48:25PM +0800, Bret Busby wrote:
>> Continuous Internet traffic is shown to be occurring.
> You generally want to establish and be clear about whether it's inbound
> or outbound. In my answer below I've covered both, but I expect only
> one direction is actually relevant.
The traffic is both inward and outward.
>> Etherape shows it to involve a single domain name (llnw.net) and its
>> IP address set (117.121.253.xxx).
>> I have tried to add a rule to deny it, using the Ubuntu firewall
>> software available through the Control Centre, but it requires, and,
>> limits each rule to, a single port number (which I do not know how to
>> find, for the traffic).
> Do you mean ufw? It accepts a port number, yes, but it's optional.
> sudo ufw deny in from 126.96.36.199/24
> sudo ufw deny out to 188.8.131.52/24
> sudo ufw enable
Unfortunately, that seems to not work - the traffic is persisting.
"So once you do know what the question actually is,
you'll know what the answer means."
- Deep Thought,
Chapter 28 of Book 1 of
"The Hitchhiker's Guide to the Galaxy:
A Trilogy In Four Parts",
written by Douglas Adams,
published by Pan Books, 1992