IPTABLES question

[Michael P. Brininstool]

I blocked IPs from about 10 asian countries and that stopped about 90% of
the brute force attempts.  It came up to about 800 lines in iptables.

-----Original Message-----
From: fedora-list-bounces at redhat.com [mailto:fedora-list-bounces at redhat.com]
On Behalf Of Michael Yep
Sent: Tuesday, July 18, 2006 2:00 PM
To: For users of Fedora Core releases
Subject: Re: IPTABLES question


I have been blocking some IPs because they are brute forcing my ssh port. I
access this server from many different places so I cant really just add a
few hosts.
I'm talking about 36000 attempts in a short time from some IP addresses

David Cary Hart wrote:
> On Tue, 18 Jul 2006 14:24:56 -0500, Michael Yep <myep at remotelink.com>
> opined:
>   
>> Hello
>>
>> I know that the preferred way of controlling access is to use 
>> whitelists, but for my case I'd like to use IP blacklisting.
>> Now using a script like
>> #!/bin/bash
>>
>> if [ -f badips.txt ]
>> then
>> for BAD_IP in `cat badips.txt`
>> do
>> iptables -A INPUT -s $BAD_IP -j DROP
>> done
>> else
>> echo "Can't read badips.txt"
>> fi
>>
>> I have like 96 banned IPs so far. I am wondering about the possible 
>> performance hit on my system, and the limits of iptables.
>> What if I have thousands?
>>
>>     
> At some point it affects performance. There are some workarounds.
> What problem are you trying to solve? What causes you to block an IP?
>
>   

--
Michael Yep
Development / Technical Operations
RemoteLink, Inc.
26W161 Plank Rd
Naperville, IL 60563-3422
Website: www.remotelink.com
Direct: 800-362-9446 x164
Fax: 630-983-0364
GPG Key 0x126439D9

Your Link to Effective Business Communications!
Specializing in telecommunications and Internet technology. If it helps
connect you with your customers, remote employees and colleagues we do it.
We put you in control of today's technology.  From Teleconferencing,
WebConferencing, Auto Attendant and Broadcast messaging to Custom data
collection, ecommerce, CTI and IVR services.

--
fedora-list mailing list
fedora-list at redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list