Re: [webmin-l] Firewall

[Jamie C. <jca...@we...>]

On Sun, 2006-03-12 at 05:20, Perisa Andjelic wrote:
> Sorry to bother but, could someone confirm if I'll do right adding following:
> 
> Linux Firewall
> Incoming Packets (INPUT)
> Add Rule: Comment- "A Hacker to block" - "207.212.29.73" *Drop Reject with ICMP type *Default
> 
> Condition details:
> As I understand nothing to change because I wish to block hacker's IP?
> Create!
> 
> Iguess that I have to repeat the same through:
> Forwarded packets (FORWARD) as well as for Outgoing packets (OUTPUT)
> 
> I'd like to block addresses found in a daily logwatch to prevent lucky hacker to break in at the end.

Hi Perisa,
That kind of rule would certainly do the job..
There is no need to create one for the FORWARD or OUTPUT chains though,
as the INPUT chain will handle all incoming traffic from the attacker.

 - Jamie