Blocking IP Range

basketkase999 · 03-12-2005, 10:45 AM

I just put up a new server and am seeing a lot of failed ssh attempts from the 219.x.x.x range. I know you can deny the range, but how?. I want to know if i should use iptables to block the range (and how to do it), or if i should use the hosts allow/deny files to block. I am a newb when it comes to this thing so i would apprecaite it if you can be as simplistic as possible. Thanks!

serverguru · 03-12-2005, 12:04 PM

Hi,
If you want to block complete range you can use CIDR mask bits.
In your case to block 219.x.x.x IP range, just use Source Ip range 219.0.0.0/8 while adding to IPtables.

Here is example command

iptables -A INPUT -s 219.0.0.0/8 -J DROP

Hope this helps you.

basketkase999 · 03-12-2005, 12:23 PM

Thanks a lot, i just set that up, i will check the logs in 24 hours and hope i don't see that range!