OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: iptables & tcp wrappers

From: Jorge Alfredo Garcia (frederixgmail.com)
Date: Mon Sep 27 2004 - 12:10:25 CDT


hello.
you can see the numbers of the different rules with the command:

iptables -L --line-numbers

You can accept a certain ip use ssh and then another rules that drops
all others ips or u can change the policy of the INOMING chain and
accept the valid ip with the rule:

iptables -A INPUT -s X.X.X.X -p tcp --dport 22 -j ACCEPT

I think this kind of blocking ips is better than host allow and host deny.
This tutorial is exelent but is kind of long, u can search for
specific stuff u will need:
http://iptables-tutorial.frozentux.net/iptables-tutorial.html

Good luck!