Re: Blocking incoming IP address immediately

From: Jeff Franks (jfranks1970_at_charter.net)
Date: 11/29/04


Date: Mon, 29 Nov 2004 11:09:27 -0600


>
> Shouldn't you use iptables -I INPUT -s 123.45.67.89 -j DROP (or REJECT)
>
> with -A you "a"dd the rule to the end of your chain, with -I you "i"nsert
> it
> at the beginning of the chain...

Thanks for the reply. I did change this in the last test I did last night.
The script does read "-i" now instead of -a. It appeared to have no effect
on the blocking of the traffic though.

Thanks again,

jeff



Relevant Pages

  • Re: Block ip using javascript
    ... >Does anybody have a javasvript for blocking all ip except 1? ... >I have tryed this script: ... Jeff ...
    (microsoft.public.inetserver.iis.security)
  • Re: Copy file with multiple names
    ... be reaching to assume thet I use a flawed concept just because I do not take ... Jeff C ... but I was asking for assistance on the script. ... I have automated pivot table reports generated from data. ...
    (microsoft.public.scripting.vbscript)
  • Re: code red attacks and real-time blackholeng
    ... > some time ago I asked if somebody had any idea how to real-time blackhole ... > ip-adresses to port 80 with ipchains who try to set off the code red virus ... > 1) the above port 80 blocking makes sense if tcp and udp are blocked or is tcp sufficient? ... "codered blocking" chain thussly: ...
    (Incidents)
  • Re: Help with Iptables on with RH linux
    ... iptables -P OUTPUT DROP ... INPUT only when packets have a destination IP of your firewall. ... the FORWARD chain contains rules that affect packets passing through ... Yes I flushed the rules before calling the script... ...
    (RedHat)
  • Re: [PHP] Limiting repetitive file access
    ... >repetitively entering the same url repetitively ... Sessions won't work unless the script at the other end is co-operating by ... and assholes seem to have infinite free time. ... You could also try blocking if a referer: ...
    (php.general)