You might look at http://www.shorewall.net/ for the iptables portion,
and it comes with great example config files.  I think you need
something else to block requests or connections per minute like
http://www.fail2ban.org, it has worked well for me.

Hope this helps,
Richard Shebora

On Tue, Feb 16, 2010 at 1:57 PM, mdipierro <[email protected]> wrote:
> does anybody have a decent iptables script that:
>
> - rejects malformed requests
> - allows only http, https and ssh
> - blocks sys attacks
> - blocks more 3 ssh connections/minute to ssh
> - blocks more 10 http requests/minute from known spiders (yahoo,
> google, ms)
> - blocks all https request from spiders
>
> --
> You received this message because you are subscribed to the Google Groups 
> "web2py-users" group.
> To post to this group, send email to [email protected].
> To unsubscribe from this group, send email to 
> [email protected].
> For more options, visit this group at 
> http://groups.google.com/group/web2py?hl=en.
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"web2py-users" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/web2py?hl=en.

Reply via email to