iptable log-message

[Andy Green]

Manuel Arostegui Ramirez wrote:

> And for a basic and simply quickly solution:
> iptables -I INPUT -s 137.227.xxx.xxx -j DROP

Needs to be

iptables -I INPUT -p tcp -s 137.227.xxx.xxx -j DROP

Stick it in /etc/rc.local (which is what I do along with a comment about
why) or do service iptables save to make it persistent.

You can drop a surprising amount of the Internet like this (prompted to
do so by attacks from those netblocks) without affecting site
availability for actual normal readers.

-Andy