Iptables -I INPUT -p tcp —dport 22 -i eth0 -m

Question

Iptables -I INPUT -p tcp —dport 22 -i eth0 -m

state —state NEW -m recent \
—set

iptables -I INPUT -p tcp —dport 22 -i eth0 -m state —state NEW -m recent \
—update —seconds 600 —hitcount 2 -j DROP

This iptable command will drop incoming connections which make more than 2 connection attempts upon port 22 within ten minutes/

Now how do i apply this to all ports ?

0

20.10.2017

2 ответов

2 просмотра

⟨ Simon | Schürrle ⟩

I'd just disable password authentication

0

20.10.2017

Martin Rys · Accepted Answer

Martin Rys

You're gonna block yourself by accident, often.

0

20.10.2017

Похожие чаты

Iptables -I INPUT -p tcp —dport 22 -i eth0 -m

2 ответов

Похожие вопросы