I blocked IPs from about 10 asian countries and that stopped about 90% of the brute force attempts. It came up to about 800 lines in iptables. -----Original Message----- From: fedora-list-bounces@xxxxxxxxxx [mailto:fedora-list-bounces@xxxxxxxxxx] On Behalf Of Michael Yep Sent: Tuesday, July 18, 2006 2:00 PM To: For users of Fedora Core releases Subject: Re: IPTABLES question I have been blocking some IPs because they are brute forcing my ssh port. I access this server from many different places so I cant really just add a few hosts. I'm talking about 36000 attempts in a short time from some IP addresses David Cary Hart wrote: > On Tue, 18 Jul 2006 14:24:56 -0500, Michael Yep <myep@xxxxxxxxxxxxxx> > opined: > >> Hello >> >> I know that the preferred way of controlling access is to use >> whitelists, but for my case I'd like to use IP blacklisting. >> Now using a script like >> #!/bin/bash >> >> if [ -f badips.txt ] >> then >> for BAD_IP in `cat badips.txt` >> do >> iptables -A INPUT -s $BAD_IP -j DROP >> done >> else >> echo "Can't read badips.txt" >> fi >> >> I have like 96 banned IPs so far. I am wondering about the possible >> performance hit on my system, and the limits of iptables. >> What if I have thousands? >> >> > At some point it affects performance. There are some workarounds. > What problem are you trying to solve? What causes you to block an IP? > > -- Michael Yep Development / Technical Operations RemoteLink, Inc. 26W161 Plank Rd Naperville, IL 60563-3422 Website: www.remotelink.com Direct: 800-362-9446 x164 Fax: 630-983-0364 GPG Key 0x126439D9 Your Link to Effective Business Communications! Specializing in telecommunications and Internet technology. If it helps connect you with your customers, remote employees and colleagues we do it. We put you in control of today's technology. From Teleconferencing, WebConferencing, Auto Attendant and Broadcast messaging to Custom data collection, ecommerce, CTI and IVR services. -- fedora-list mailing list fedora-list@xxxxxxxxxx To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
