Re: iptables & tcp wrappers

On Fri, 24 Sep 2004, Meatplow wrote:

> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> 
> Hello.
> 
> I'm running RH Enterprise edition.
> 
> I'm relatively new to iptables.  I am getting the common intrusion
> attempts with some  of the common uses of test/guest/root/ and a
> couple others   I've been able to add the IPs to the to iptables.,
> but
> I'd really like a log that tells me the info that I want to know.
> 
> My basic input command is this :
> #iptables -A INPUT -p tcp -s PUT_IP_HERE -d 0/0  --syn -j DROP
> 
> iptables seem a little convoluted.  Example.  To delete  a line -
> supposedly give it a line and it will be deleted/modified.  My
> problem is even with #iptable -L -v there is no line number ?
> 
> My goal is to block all incoming ssh attempts except IP#.
> This is where I got into hosts.allow/deny as mentioned below.
> 
> I've tried to find many different types of commands and it works to
> some degree, but not the way I'd expect it to.
> 
> Any help would be appreciated.  I'm not completely sure that I
> understand iptables as well as I want/need to.  I've also toyed
> around with the hosts.allow/hosts.deny and have not been successful.
> 
> 
> 
> I know that there is a lot of info in here, and I'm tired.  I'll
> leave it at that

Instead of beating yourself up trying to build rules by hand why not get
fwbuilder, shorewall, smoothwall or one of the many other programs that
are real good at building iptables rules. Personally I like fwbuilder but
that is just me. Others have their own favorites.

Tom


-- 
Fedora-config-list mailing list
Fedora-config-list@xxxxxxxxxx
http://www.redhat.com/mailman/listinfo/fedora-config-list