Re: [suse-security] Blocking an ip-address

Hi, Chadley Wilson schrieb:

Greetings,

Is there away to block an ip-address completely with SuSEFirewall ?

It is possible but not that easy. You can add custom iptables rules in a separate file and call it from the SuSE Firewall; look out for /etc/sysconfig/scripts/SuSEfirewall2-custom. Alternatively, you could use an own firewall script instead of SuSE FW. In order to build the rules, you could use e.g. fwbuilder (http://www.fwbuilder.org) and add the rules to your script. My experience is that SuSE FW is just fine to have a generic protection but if you need a more granular configuration, a custom iptables rule set is the better way to go. Regards Reto