iptables

alrawab · 09-04-2003, 06:28 AM

can any one help me to stop shh ,ping and telnet by using iptables
bye

ppuru · 09-04-2003, 06:35 AM

iptables -P INPUT DROP
iptables -P OUTPUT ACCEPT
iptables -P FORWARD DROP

iptables -A INPUT -i lo -j ACCEPT
iptables -A OUTPUT -o lo -j ACCEPT

iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT

This will stop all incoming connections except the ones generated by your system

alrawab · 09-04-2003, 06:48 AM

thnx ... i ment how to set some clients in lan to stop shh,nfs,etc
when we use one linux box as fire wall
bye

ppuru · 09-04-2003, 06:58 AM

you can use the INPUT command like this

iptables -A INPUT -i eth0 -p tcp -s <source ip u don't like> --dport ssh -j REJECT