Tom Eastep wrote: > Paul Gear wrote: > >> >> The dynamic blacklist is just a normal table called dynamic. There is >> nothing to stop you putting stuff in there manually in a way that suits >> your needs. So instead of running >> shorewall drop IP >> you would run >> iptables -A dynamic --src IP --proto tcp --dport 22 -j DROP >> The equivalent of >> shorewall allow IP >> would in this case be >> iptables -D dynamic --src IP --proto tcp --dport 22 -j DROP > > Just don't "shorewall save" after you do that because "shorewall > restore" from that save point will crash.
Another good reason not to do it! :-) Paul ------------------------------------------------------------------------- Check out the new SourceForge.net Marketplace. It's the best place to buy or sell services for just about anything Open Source. http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
