Paul Gear wrote:
The dynamic blacklist is just a normal table called dynamic. There is
nothing to stop you putting stuff in there manually in a way that suits
your needs. So instead of running
shorewall drop IP
you would run
iptables -A dynamic --src IP --proto tcp --dport 22 -j DROP
The equivalent of
shorewall allow IP
would in this case be
iptables -D dynamic --src IP --proto tcp --dport 22 -j DROP
Just don't "shorewall save" after you do that because "shorewall restore" from that save point will crash.
-Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ [EMAIL PROTECTED] PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------- Check out the new SourceForge.net Marketplace. It's the best place to buy or sell services for just about anything Open Source. http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
