Debian DokuWiki

User Tools

Site Tools

Trace:
iptables

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
iptables [2011/09/22 02:05] – [xt_recent] k2pateliptables [2020/08/10 02:35] (current) – external edit 127.0.0.1
Line 70: Line 70:
 In latest version ipt_recent replaced by xt_recent.\\ In latest version ipt_recent replaced by xt_recent.\\
 there is few change which could break your iptables rules.\\ there is few change which could break your iptables rules.\\
-In order to make ssh bruteforce protection working please use following rules.+In order to make ssh bruteforce protection working please use following rules.\\ 
 +this also effect Fedora 15 and latest iptables / kernel
  
 <code bash> <code bash>
Line 77: Line 78:
  
  
--A INPUT -p tcp -m multiport --dports 21,22 -m recent --update --seconds 3600 --name SSH_BAN --rsource -j DROP +-A INPUT -p tcp -m multiport --dports 21,22 -m recent --update --seconds 8600 --name SSH_BAN --rsource -j DROP 
 -A INPUT -p tcp -m multiport --dports 21,22 -m state --state NEW -j BRTBLK  -A INPUT -p tcp -m multiport --dports 21,22 -m state --state NEW -j BRTBLK 
  
Line 89: Line 90:
 </code> </code>
  
-Now try to login to box 4 times quickly to test.+Now try to login to box 4 times quickly to test.\\ 
 +For more advanced Options please visit [[http://www.thatsgeeky.com/2011/02/escalating-consequences-with-iptables/ | Th4tsG33ky]]
iptables.1316657130.txt.gz · Last modified: 2020/08/10 02:30 (external edit)