I have a friend that has a few boxes directly on the internet, which he thinks are being access by unwanted “visitors”. These machine still have to have routable IP address but should have limited access from external IP subnets.
What would be suitable for limiting IP subnet access to these address? Would a ‘firewall’ like machine with IPTABLES be able to accomplish this, that is without changing the IP address passed through the ‘firewallish’ machine?
|