block ip range

Domtoren · 08-22-2013, 02:36 AM

Is this going to work:

iptables -I INPUT -m iprange --src-range 1.160.0.0-1.175.255.255 -j DROP

Will this block, say, ip-address 1.163.4.5?

Thanks in advance

Linux MR · 08-22-2013, 08:09 AM

The syntax looks correct.
Have you seen this past thread: http://www.linuxquestions.org/questi...tables-469432/

You should set it up and try using telnet or netcat to test it.

Quote:

telnet -b <source-ip>
ncat -s <source_ip>

Hope that helps...

Domtoren · 08-22-2013, 08:20 AM

iptables accepts the syntax. And the Tauwanese spammers/hackers that were bothering me haven't been around since I added this line.

But testing with netcat or telnet: No joy...

netcat -s 1.163.4.5 localhost 25
Can't grab 1.163.4.5:0 with bind : Cannot assign requested address

Linux MR · 08-22-2013, 03:45 PM

try binding the ip to an interface and adding a route.
***BUT FIRST DON'T FORGET TO SAVE A COPY OF THE ORIGINAL, AND REPLACE THE NEWER CONFIGS***

for example...
eth0 IP: 192.168.1.1
IP to spoof: 7.7.7.7
Target IP: 5.5.5.5

Code:

ifconfig eth0 7.7.7.7
route add -net 7.7.7.0 eth0
nc -nvu -s 7.7.7.7 -g 192.168.1.1 5.5.5.5 1111

Hope that helps...