G'day.

I am form the Microsoft and OpenBSD world and have recently begun
using RH7.3 for my firewall.

I need to block an Internet Address.

In OpenBSD I would use -> 'block out quick on ethx ...'

I have theses two rules in my iptables file:

$IPT -t filter -A INPUT  -p tcp -s 0/0 -d 64.246.26.185  --dport 80 -m
limit --limit 2/minute -j $STOP
$IPT -t filter -A OUTPUT -p tcp -s 64.246.26.185 -d 0/0  --dport 80 -m
limit --limit 2/minute -j $STOP

$STOP and $IPT are macro substitutions that works for everything else,
so I know that's not the problem.

What am I missing or do I have to learn more?

tx in advance.

RG

[ Post a follow-up to this message ]

rgutery@mentorits.com (Richard Gutery) wrote in
news:627e5b72.0406281321.729a8fbf@posting.google.com:

> G'day.
>
> I am form the Microsoft and OpenBSD world and have recently begun
> using RH7.3 for my firewall.
>
> I need to block an Internet Address.
>
> In OpenBSD I would use -> 'block out quick on ethx ...'
>
> I have theses two rules in my iptables file:
>
> $IPT -t filter -A INPUT  -p tcp -s 0/0 -d 64.246.26.185  --dport 80 -m
> limit --limit 2/minute -j $STOP
> $IPT -t filter -A OUTPUT -p tcp -s 64.246.26.185 -d 0/0  --dport 80 -m
> limit --limit 2/minute -j $STOP
>
> $STOP and $IPT are macro substitutions that works for everything else,
> so I know that's not the problem.
>
> What am I missing or do I have to learn more?
>
> tx in advance.
>
> RG
>

RG,

Give bastille a try.  It's available on www.bastille-linux.org and it
does work wonders.  Also, you get a good tutorial on Unix security while
you set it up.

HTH

[ Post a follow-up to this message ]