|
From: Robin S. <ras...@gm...> - 2016-03-18 16:28:22
|
I run sshguard with ipfw on a FreeBSD 10.2 virtual box hosted by RootBSD. The relevant firewall entry is: 50000 deny ip from table(22) to me I usually access the server from my home location through a DSL line with AT&T. If I put this rule in the firewall script, then rebooting or running the script locks me out because sshguard adds my home IP to table 22. The workaround has been to remove the rule above from /etc/firewall-rules (the firewall script), make an ssh connection, add the rule: ipfw add 50000 deny ip from table\(22\) to me Then, I look for my home IP in table 22, and upon finding it, I delete it from the table. (Otherwise, any further ssh connections from my home location get blocked). But why is this happening in the first place? Robin Smith |