LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Newbie (https://www.linuxquestions.org/questions/linux-newbie-8/)
-   -   I need help. I'm new at Linux (https://www.linuxquestions.org/questions/linux-newbie-8/i-need-help-im-new-at-linux-756128/)

Mayhm 09-18-2009 02:59 AM

I need help. I'm new at Linux
 
I'm having trouble with making a iptable rule that will block all
traffic from 10.14.34.207 and not letting the sender know that traffic is being blocked. I'm thinking whether it should be # iptable -R Input 1 --source 10.14.34.207. I tried reading my book on the section about iptables and their commands, but I didn't quite understand it. Also, if the following entry in TCP wrappers (which from my notes, i think are daemons that allow certain access to a local server depending on the client's rules or permissions)if a client at address 172.16.124.100 tries to access a website running on that server what would happen?
hosts.allow
httpd: 172.16.*
vsftpd: 192.168.0.*
sshd: 172.16.20.114 I'm guessing that since I read from my linux book, if the daemon/client pair matches a line in hosts.allow, then access is granted. So, I'm assuming that since no line matches it exactly as the server, then access would be granted for the client right?

hosts.deny
httpd: 172.15.*
vsftpd: 172.16.24.100
sshd: 172.16.*
And I'm assuming since the vsftpd line matches the client address, then access would be denied right?
One last thing, can someone clarify for me the vsftd?
Is is the same as ftp?

kdelover 09-18-2009 03:09 AM

What is the rule you wrote? Try this
iptables -t filter -I INPUT -s 10.14.34.207 -d <your ip address> -j DROP

Mayhm 09-19-2009 02:35 AM

The rule that i was thinking of writing was
#iptables iptable -R Input 1 --source 10.14.34.207 -J Drop
if that helps. As you can see, I really am a newbie :'(


All times are GMT -5. The time now is 10:24 AM.