sshd question...

Andre Speelmans andre at as.no-ip.com
Mon Nov 15 18:50:54 UTC 2004


Alex F. Evonosky wrote:
> On Monday 15 November 2004 9:16 am, RoboticGolem wrote:
> 
>>Just a quick one here...  I need to know how to deny specific ip
>>addresses from access to a server... specifically the ssh daemon.
>>Someone is trying to hack my server, but he's using a static ip and
>>I'd like to just deny him entirely.  I just dont know how to do it.
> 
> ATTACKER="x.x.x.x/32"
> /sbin/iptables -A block -s $ATTACKER -d $ATTACKER -j DROP

I would not use this one. This blocks packets coming from $ATTACKER 
going to $ATTACKER.

Better use:
/sbin/iptables -I INPUT -s $ATTACKER -j DROP

-- 
Kind regards,

Andre




More information about the fedora-list mailing list