More SSH 'trolling'
Vladimir G. Ivanovic
vladimir at acm.org
Fri Oct 15 23:17:27 UTC 2004
>>>>> "bp" == Björn Persson <listor1.rombobeorn at comhem.se> writes:
bp> As written, every incoming packet would be compared to those rules. You
bp> couls however create a new chain, "blocked" say, and configure the log
bp> watcher to add the rules to that chain. In the main "INPUT" chain you
bp> would then have a rule to jump to the chain "blocked" only on connection
bp> attempts to port 22.
I see. Could someone more iptables-knowledgeable than I post some rules
that accomplish what Björn has suggested?
Vladimir G. Ivanovic http://leonora.org/~vladimir
Palo Alto, CA 94306 +1 650 678 8014
More information about the users