Is a simple method of blocking a particular domain name or IP address set available

[Bret Busby]

On 17/05/2018, Colin Watson <cjwatson at ubuntu.com> wrote:
> On Thu, May 17, 2018 at 10:48:25PM +0800, Bret Busby wrote:
>> Continuous Internet traffic is shown to be occurring.
>
> You generally want to establish and be clear about whether it's inbound
> or outbound.  In my answer below I've covered both, but I expect only
> one direction is actually relevant.
>

The traffic is both inward and outward.

>> Etherape shows it to involve a single domain name (llnw.net) and its
>> IP address set (117.121.253.xxx).
>>
>> I have tried to add a rule to deny it, using the Ubuntu firewall
>> software available through the Control Centre, but it requires, and,
>> limits each rule to, a single port number (which I do not know how to
>> find, for the traffic).
>
> Do you mean ufw?  It accepts a port number, yes, but it's optional.
>
>   sudo ufw deny in from 117.121.253.0/24
>   sudo ufw deny out to 117.121.253.0/24
>   sudo ufw enable
>

Unfortunately, that seems to not work - the traffic is persisting.

-- 
Bret Busby
Armadale
West Australia
..............

"So once you do know what the question actually is,
 you'll know what the answer means."
- Deep Thought,
 Chapter 28 of Book 1 of
 "The Hitchhiker's Guide to the Galaxy:
 A Trilogy In Four Parts",
 written by Douglas Adams,
 published by Pan Books, 1992

....................................................