Re: deny acess of an IP

[Rick Stevens <rstevens vitalstream com>]

Duncan wrote:
> Oh, ok...
> just did so and found these two...
> but wasn't ipchains supposed to take "iptables" place?

It does.  You can use either, just change the "ipchains" commands to
"ipfilters".  The syntax is the same.

> Do i have to edit some config for ipchains, before i
> run that "modprobe ipchains"?

No.  That loads the modules.  Then the commands set up the actual
filters.

> ...not that it cuts the entrance to my whole system by
> doing so. (lol, sorry... i have no idea about
> ipchains, so i just ask to be sure, before messing up
> my system ;) )

The rules I gave you will only block access to your system from that
one IP address.  Are you sure you want your system exposed that way?

> Thanks a lot,
>
> Duncan
>
> --- Rick Stevens <rstevens vitalstream com> wrote:
>
> > Duncan wrote:
> >
> > > Oh, ok...
> > >
> > > i just tried it, but i only get 
> > >
> > > "
> > > ipchains: Protocol not available
> > > "
> > >
> > > ...although ipchains is installed and running.
> > Are you sure?  Do an "lsmod" and see if ipchains or
> > iptables is
> > loaded.  If it isn't, do "modprobe ipchains" and try
> > "lsmod" again.
> > If it's loaded this time, try the commands again. 
> > They were:
> >
> >   ipchains -A input -p tcp -s block-address/32 -d
> > 0/0 -j DENY
> >   ipchains -A input -p udp -s block-address/32 -d
> > 0/0 -j DENY
> ----------------------------------------------------------------------
>
> > - Rick Stevens, SSE, VitalStream, Inc.     
> > rstevens vitalstream com -
> > - 949-743-2010 (Voice)                   
> > http://www.vitalstream.com -
> > -                                                   
> >                -
> > -   Whoever said "Money can't buy friends" obviously
> > never brought   -
> > -                        donuts to the office.      
> >                -
> ----------------------------------------------------------------------
>
> > _______________________________________________
> > Redhat-install-list mailing list
> > Redhat-install-list redhat com
> https://listman.redhat.com/mailman/listinfo/redhat-install-list
>
>
> __________________________________________________
> Do You Yahoo!?
> Yahoo! Health - your guide to health and wellness
> http://health.yahoo.com
>
>
>
> _______________________________________________
> Redhat-install-list mailing list
> Redhat-install-list redhat com
> https://listman.redhat.com/mailman/listinfo/redhat-install-list



--
----------------------------------------------------------------------
- Rick Stevens, SSE, VitalStream, Inc.      rstevens vitalstream com -
- 949-743-2010 (Voice)                    http://www.vitalstream.com -
-                                                                    -
-   NEWS FLASH! Intelligence of mankind decreasing!  Details at...   -
-     uh, when, uh, the little hand is, uh, on the...  Aw, NUTS!     -
----------------------------------------------------------------------