[WBEL-users] iptables auto add baddies script?

Benjamin J. Weiss benjamin@birdvet.org
Wed, 29 Dec 2004 15:55:31 -0600


Jon Lewis wrote:

>You people are doing this the wrong way around.  Don't block the hosts you
>think are "bad".  Block everyone.  Then allow just the IP ranges you
>actually need to have access.
>  
>
Then how would I get to my machine when I'm away on business, or called 
up for duty with the National Guard?

Although, now that I'm getting regular attacks against my ssh server, 
that port knocking thing is sure sounding a lot better...

http://www.linuxjournal.com/article/6811

Ben