Re: deny acess of an IP

[Duncan <y_mail_99 yahoo com>]

--- Rick Stevens <rstevens vitalstream com> wrote:
> Duncan wrote:
> > Oh, ok...
> > just did so and found these two...
> > but wasn't ipchains supposed to take "iptables"
> place?
> 
> It does.  You can use either, just change the
> "ipchains" commands to
> "ipfilters".  The syntax is the same.
> 

Oh, ok...
will try it asap.


> > Do i have to edit some config for ipchains, before
> i
> > run that "modprobe ipchains"?
> 
> No.  That loads the modules.  Then the commands set
> up the actual
> filters.
> 
> > ...not that it cuts the entrance to my whole
> system by
> > doing so. (lol, sorry... i have no idea about
> > ipchains, so i just ask to be sure, before messing
> up
> > my system ;) )
> 
> The rules I gave you will only block access to your
> system from that
> one IP address.  Are you sure you want your system
> exposed that way?
> 

Ah, ok.
Well, the system is preconfigured and there are
already some rules, but due to my lack of knowledge, i
wasn't able to add rules properly.
Thanks to your help this changed now :)

...well, anyway, i think this is a serious matter and
i will go and browse the web to find some more info on
ipchains and iptables.

Thank you,

Duncan 


> > 
> > Thanks a lot,
> > 
> > Duncan
> > 
> > --- Rick Stevens <rstevens vitalstream com> wrote:
> > 
> >>Duncan wrote:
> >>
> >>>Oh, ok...
> >>>
> >>>i just tried it, but i only get 
> >>>
> >>>"
> >>>ipchains: Protocol not available
> >>>"
> >>>
> >>>...although ipchains is installed and running.
> >>>
> >>Are you sure?  Do an "lsmod" and see if ipchains
> or
> >>iptables is
> >>loaded.  If it isn't, do "modprobe ipchains" and
> try
> >>"lsmod" again.
> >>If it's loaded this time, try the commands again. 
> >>They were:
> >>
> >>   ipchains -A input -p tcp -s block-address/32 -d
> >>0/0 -j DENY
> >>   ipchains -A input -p udp -s block-address/32 -d
> >>0/0 -j DENY
> >>
> >>
> >
>
----------------------------------------------------------------------
> > 
> >>- Rick Stevens, SSE, VitalStream, Inc.     
> >>rstevens vitalstream com -
> >>- 949-743-2010 (Voice)                   
> >>http://www.vitalstream.com -
> >>-                                                 
>  
> >>                -
> >>-   Whoever said "Money can't buy friends"
> obviously
> >>never brought   -
> >>-                        donuts to the office.    
>  
> >>                -
> >>
> >>
> >
>
----------------------------------------------------------------------
> > 
> >>
> >>
> >>_______________________________________________
> >>Redhat-install-list mailing list
> >>Redhat-install-list redhat com
> >>
> >>
> >
>
https://listman.redhat.com/mailman/listinfo/redhat-install-list
> > 
> > 
> > __________________________________________________
> > Do You Yahoo!?
> > Yahoo! Health - your guide to health and wellness
> > http://health.yahoo.com
> > 
> > 
> > 
> > _______________________________________________
> > Redhat-install-list mailing list
> > Redhat-install-list redhat com
> >
>
https://listman.redhat.com/mailman/listinfo/redhat-install-list
> > 
> 
> 
> 
> -- 
>
----------------------------------------------------------------------
> - Rick Stevens, SSE, VitalStream, Inc.     
> rstevens vitalstream com -
> - 949-743-2010 (Voice)                   
> http://www.vitalstream.com -
> -                                                   
>                 -
> -   NEWS FLASH! Intelligence of mankind decreasing! 
> Details at...   -
> -     uh, when, uh, the little hand is, uh, on
> the...  Aw, NUTS!     -
>
----------------------------------------------------------------------
> 
> 
> 
> _______________________________________________
> Redhat-install-list mailing list
> Redhat-install-list redhat com
>
https://listman.redhat.com/mailman/listinfo/redhat-install-list


__________________________________________________
Do You Yahoo!?
Yahoo! Health - your guide to health and wellness
http://health.yahoo.com