iptables & tcp wrappers

From: Meatplow (greg_at_meatplow.com)
Date: 09/24/04

  • Next message: Jerry Patterson: "Re: Network "Change Management"" 
    To: focus-linux@securityfocus.com
Date: Fri, 24 Sep 2004 13:57:26 -0700

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    Hello.

    I'm running RH Enterprise edition.

    I'm relatively new to iptables. I am getting the common intrusion
    attempts with some of the common uses of test/guest/root/ and a
    couple others I've been able to add the IPs to the to iptables.,
    but
    I'd really like a log that tells me the info that I want to know.

    My basic input command is this :
    #iptables -A INPUT -p tcp -s PUT_IP_HERE -d 0/0 --syn -j DROP

    iptables seem a little convoluted. Example. To delete a line -
    supposedly give it a line and it will be deleted/modified. My
    problem is even with #iptable -L -v there is no line number ?

    My goal is to block all incoming ssh attempts except IP#.
    This is where I got into hosts.allow/deny as mentioned below.

    I've tried to find many different types of commands and it works to
    some degree, but not the way I'd expect it to.

    Any help would be appreciated. I'm not completely sure that I
    understand iptables as well as I want/need to. I've also toyed
    around with the hosts.allow/hosts.deny and have not been successful.

    I know that there is a lot of info in here, and I'm tired. I'll
    leave it at that

    Thanks in advance for your time and help.

    Meatplow
    greg ta meatplow.com

    Thanks again.

    -----BEGIN PGP SIGNATURE-----
    Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com>

    iQA/AwUBQVSBsR42gIcyjrnjEQJIqwCfWAShp7r+J1XNNjQq6sbvvD03WZ8AoNrg
    ctQ837g5pQDafgBhTTeeMr1V
    =niWK
    -----END PGP SIGNATURE----- 

    -- 
Fedora-config-list mailing list
Fedora-config-list@redhat.com
http://www.redhat.com/mailman/listinfo/fedora-config-list
  • Next message: Jerry Patterson: "Re: Network "Change Management""

    Relevant Pages

    • RE: iptables & tcp wrappers
      ... I'm running RH Enterprise edition. ... I'm relatively new to iptables. ... I am getting the common intrusion ... My basic input command is this: ...
      (Focus-Linux)
    • Re: iptables & tcp wrappers
      ... if you need to restrict ssh for everyone except those you trust, ... the iptables LOG target. ... I am getting the common intrusion ... M> My basic input command is this: ...
      (Focus-Linux)
    • RE: iptables & tcp wrappers
      ... There's a fantastic tutorial on iptables at ... absolutely nothing about iptables when I started reading it, ... I am getting the common intrusion ... My basic input command is this: ...
      (Focus-Linux)
    • RE: iptables & tcp wrappers
      ... It is a nice wrapper for iptables. ... > Hash: SHA1 ... > I'm running RH Enterprise edition. ... > My basic input command is this: ...
      (Focus-Linux)
    • Re: iptables & tcp wrappers
      ... > I'm running RH Enterprise edition. ... > I'm relatively new to iptables. ... If this server running RH Enterprise is some kind of firewall with two ... or more network interfaces, you could configure the SSH daemon so it ...
      (Focus-Linux)