[Novalug] What's a good way to block a bunch of IP's?

Greg Faust gregfaust@gmail.com
Mon Jul 30 08:23:37 EDT 2012


You might try fail2ban for a quick an easy way to block repeat offenders.

You can also backup/restore your iptables rules manually with iptables-save
and iptables-restore, something like:

iptables-save > /etc/fw1.conf
iptables-restore < /etc/fw1.conf


On Sun, Jul 29, 2012 at 10:20 PM, Brendan Choi <bchoi9999@gmail.com> wrote:

> Right now, I don't have many to block, so I just put them in
> /etc/sysconfig/iptables. I don't want to keep adding lines to it. These are
> random users, not from any one subnet or prefix. Probably running iptables
> command in a separate file during boot to loop through a list of IP's is a
> good way. Not sure if that's the best or fastest.
> Any other ways? It'd be nice for iptables to have an option to load a list
> of IP's or subnets from a file, but I can't find that option. Thanks!
>
>
>
> Brendan
>
>
>
>
> _______________________________________________
> Novalug mailing list
> Novalug@calypso.tux.org
> http://calypso.tux.org/mailman/listinfo/novalug
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.firemountain.net/pipermail/novalug/attachments/20120730/5a4db5e5/attachment.htm>


More information about the Novalug mailing list