linux-config.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
From: "Meatplow" <greg@meatplow.com>
To: fedora-config-list@redhat.com
Cc: linux-config@vger.kernel.org
Subject: iptables & tcp wrappers
Date: Fri, 24 Sep 2004 13:23:13 -0700	[thread overview]
Message-ID: <cj1vo3$98t$1@sea.gmane.org> (raw)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Hello.

I'm running RH Enterprise edition.

I'm relatively new to iptables.  I am getting the common intrusion
attempts with some  of the common uses of test/guest/root/ and a
couple others   I've been able to add the IPs to the to iptables.,
but
I'd really like a log that tells me the info that I want to know.

My basic input command is this :
#iptables -A INPUT -p tcp -s PUT_IP_HERE -d 0/0  --syn -j DROP

iptables seem a little convoluted.  Example.  To delete  a line -
supposedly give it a line and it will be deleted/modified.  My
problem is even with #iptable -L -v there is no line number ?

My goal is to block all incoming ssh attempts except IP#.
This is where I got into hosts.allow/deny as mentioned below.

I've tried to find many different types of commands and it works to
some degree, but not the way I'd expect it to.

Any help would be appreciated.  I'm not completely sure that I
understand iptables as well as I want/need to.  I've also toyed
around with the hosts.allow/hosts.deny and have not been successful.



I know that there is a lot of info in here, and I'm tired.  I'll
leave it at that


Thanks in advance for your time and help.

Meatplow
greg  ta meatplow.com


Thanks again.

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com>

iQA/AwUBQVSBsR42gIcyjrnjEQJIqwCfWAShp7r+J1XNNjQq6sbvvD03WZ8AoNrg
ctQ837g5pQDafgBhTTeeMr1V
=niWK
-----END PGP SIGNATURE-----





-- 
Fedora-config-list mailing list
Fedora-config-list@redhat.com
http://www.redhat.com/mailman/listinfo/fedora-config-list

             reply	other threads:[~2004-09-24 20:23 UTC|newest]

Thread overview: 2+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2004-09-24 20:23 Meatplow [this message]
2004-09-25 10:17 ` iptables & tcp wrappers Lars Gullik Bjønnes

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to='cj1vo3$98t$1@sea.gmane.org' \
    --to=greg@meatplow.com \
    --cc=fedora-config-list@redhat.com \
    --cc=linux-config@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).