how to block an ip

porous · 10-13-2003, 11:14 AM

hi all

i am using rh9
is it possible to block specific ip's from using any of the remote
login feature ..esp telnet and ssh

i am sure it should be possible , can any one tell me how to do it

eg; if i am giving shell account to other users , but i want to ban
certain ip's for accesing the feature ...

thx in advance ...

----------------------------------------------------------------------
if darkness > light ? light : light ;
// in either case light came first

Hangdog42 · 10-13-2003, 11:55 AM

If you know the IP address, you can block it with a rule in your iptables rule set. For example, blocking ssh:

iptables -A INPUT -p TCP -s 1.2.3.4 --dport 22 -j DROP

Just make sure the rule is placed properly in the script so it drops the connection before another rule allows it.

swell · 10-13-2003, 02:55 PM

I think the easiest way to do it is : In /etc/hosts.deny
ALL: ***.***.***.***, ***.***.
If you just wanna disable some functions, then replace ALL with those daemon names.