Greeting'z, On Thursday 22 December 2005 01:34 am, Andre Truter wrote:
I have a problem on one of my servers. A specific host has been attacking my server via ssh for the past 5 hours.
Now it is starting to cost me in bandwidth usage.
How can I set up SuSEFirewall2 to just drop all packets from that specific host?
Thanks -- Andre Truter | Software Engineer | Registered Linux user #185282 ICQ #40935899 | AIM: trusoftzaf | http://www.trusoft.za.org
~ A dinosaur is a salamander designed to Mil Spec ~
Why bother with the firewall, do it the easy way: sudo echo "PORT : IP_ADDY/NETMASK" >>/etc/hosts.deny && rcsshd restart done. examples: block a single host: ssh : 211.206.120.15/255.255.255.0 block an entire subnet: ssh : 220.135.213.*/255.255.254.0 (these ip's were bugging me daily, no more) -- "NiTa Ek WeLu Ek Ra"