Hello, We have a RH 7.3 router as our main gateway (T1 backbone). This goes into our main switch, we have many servers and wireless connections to other locations with routers etc. Right now we're blocking ssh from our main gateway router (via iptables) to any of our servers. Should this be done on all the servers as well? Should I be doing all my blocking from just the main gateway router? or on each individual server? or both? Seeing how we have many servers, do I have to create a rule for each one? or can I somehow combine multiple destination ips to the same rule? Thanks, - Darren
