Re: IPTABLES question

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I have been blocking some IPs because they are brute forcing my ssh
port. I access this server from many different places so I cant really
just add a few hosts.
I'm talking about 36000 attempts in a short time from some IP addresses

David Cary Hart wrote:
> On Tue, 18 Jul 2006 14:24:56 -0500, Michael Yep <myep@xxxxxxxxxxxxxx>
> opined:
>   
>> Hello
>>
>> I know that the preferred way of controlling access is to use
>> whitelists, but for my case I'd like to use IP blacklisting.
>> Now using a script like
>> #!/bin/bash
>>
>> if [ -f badips.txt ]
>> then
>> for BAD_IP in `cat badips.txt`
>> do
>> iptables -A INPUT -s $BAD_IP -j DROP
>> done
>> else
>> echo "Can't read badips.txt"
>> fi
>>
>> I have like 96 banned IPs so far. I am wondering about the possible
>> performance hit on my system, and the limits of iptables.
>> What if I have thousands?
>>
>>     
> At some point it affects performance. There are some workarounds.
> What problem are you trying to solve? What causes you to block an IP?
>
>   

-- 
Michael Yep
Development / Technical Operations
RemoteLink, Inc.
26W161 Plank Rd
Naperville, IL 60563-3422
Website: www.remotelink.com
Direct: 800-362-9446 x164
Fax: 630-983-0364
GPG Key 0x126439D9

Your Link to Effective Business Communications!
Specializing in telecommunications and Internet technology. If it helps connect you with your customers, remote employees and colleagues we do it. We put you in control of today’s technology.  From Teleconferencing, WebConferencing, Auto Attendant and Broadcast messaging to Custom data collection, ecommerce, CTI and IVR services.

-- 
fedora-list mailing list
fedora-list@xxxxxxxxxx
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [Fedora Magazine]     [Fedora News]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Maintainers]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Legacy]     [Fedora Desktop]     [Fedora Fonts]     [ATA RAID]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [SSH]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Centos]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Tux]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Asterisk PBX]     [Fedora Sparc]     [Fedora Universal Network Connector]     [Libvirt Users]     [Fedora ARM]

  Powered by Linux