Can anyone suggest any extensions to this. It's a part of a sort of moving 
firewall script, run hourly that firewalls those who are annoying me the most. 
( I regenerate that part of the list from the mailer logs )

1. Reset and static rules.
iptables -F INPUT
iptables -P INPUT ACCEPT
iptables -A INPUT -i lo -j ACCEPT
iptables -A INPUT -i eth0 -j ACCEPT
iptables -A INPUT -i eth0 -s 192.168.0.0/255.255.0.0 -j DROP
iptables -A INPUT -i eth0 -s 172.16.0.0/255.250.0.0 -j DROP
iptables -A INPUT -i eth0 -s 10.0.0.0/255.0.0.0 -j DROP

2. Dynamic rules - list of this hours bad boys...
iptables -A INPUT -i eth0 -s 82.251.202.168 -j DROP
iptables -A INPUT -i eth0 -s 82.17.100.88 -j DROP
...


I'll put up the completed script on the wiki when done. 

Cheers,

Steve

Reply via email to