More SSH 'trolling'

Vladimir G. Ivanovic vladimir at acm.org
Fri Oct 15 23:17:27 UTC 2004


>>>>> "bp" == Björn Persson <listor1.rombobeorn at comhem.se> writes:

    bp> As written, every incoming packet would be compared to those rules. You
    bp> couls however create a new chain, "blocked" say, and configure the log
    bp> watcher to add the rules to that chain. In the main "INPUT" chain you
    bp> would then have a rule to jump to the chain "blocked" only on connection
    bp> attempts to port 22.

I see. Could someone more iptables-knowledgeable than I post some rules
that accomplish what Björn has suggested?

--- Vladimir

-- 
Vladimir G. Ivanovic                        http://leonora.org/~vladimir
Palo Alto, CA 94306                                      +1 650 678 8014




More information about the fedora-list mailing list