On Fri, Feb 11, 2005 at 09:43:05AM -0600, Tib wrote:
> Ok, I've done some fiddling but still have some issues. I went with some
> recommendations on what people said and here's what I have. The first
> three rules of my startup set are as follows:
>
> iptables -A INPUT -i eth0 -p tcp --dport 22 -m state \
> --state ESTABLISHED -j ACCEPT
>
> iptables -A INPUT -i eth0 -p tcp --destination-port 22 -m limit \
> --limit 15/hour --limit-burst 5
this rule doesn't jump anywhere; therefore it is a non-terminating match
and all packets will continue on to...
> iptables -A INPUT -i eth0 -p tcp --destination-port 22 -j DROP
...the rule that drops all inbound ssh traffic.
try adding a "-j ACCEPT" to the limit rule.
-j
--
"That's it! You people have stood in my way long enough. I'm going
to clown college!"
--The Simpsons
