If you followed the default installation and set up the firewall. It will only allow ssh & other services that you have configured. If you set up this box as http server it should have enabled that as well. I would advise you to run: iptables -L # to see what is allowed or not If you have other ports open that you don't need, run: service-config-securitylevel or system-config-securitylevel-tui #this will allow you to do it on an easy prompt driven way if you don't want to create a script with iptables commandns on it that you can modify as you wish and reload accordingly as I do on my boxes regards On Sat, Aug 30, 2008 at 4:04 AM, Tim <ignored_mailbox@xxxxxxxxxxxx> wrote: > On Sat, 2008-08-30 at 09:59 +0100, Frank Murphy wrote: >> I mean only allow ssh access from those two scenarios, >> my laptop + an F9 usb-stick. >> >> because there are attempts by "fluffy" and other(s) to access the box. > > Well, if your own computers are from fixed IPs, you can set those into a > list of IPs allowed to connect. However, that doesn't stop someone else > who's able to get the same IP from trying. > > Good passwords, and only using the newer SSH2 protocol, makes it damn > hard for anyone else to get in. They can try, and that's about it. > > Something like fail2ban will automatically firewall off someone who > tries and fails, so they don't get to try again. There's a few of those > sort of things, which will auto-blacklist addresses for a while. It > could be a permanent blacklist, but you'd only want to do that if there > was no chance of accidentally locking yourself out. > > Look into finding and using fail2ban. I think that's your best way to > handle it. > > -- > [tim@localhost ~]$ uname -r > 2.6.25.14-108.fc9.i686 > > Don't send private replies to my address, the mailbox is ignored. I > read messages from the public lists. > > > > -- > fedora-list mailing list > fedora-list@xxxxxxxxxx > To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list > Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines > -- Ed Landaveri GNU/Linux User 433512 http://counter.li.org "Free as in Freedom" -- fedora-list mailing list fedora-list@xxxxxxxxxx To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
