I am runnng Fedora Core 3 and have a question regarding iptables.

I want only allow ssh connections from specific IP address and deny all other attempts. What would the entry look like in the iptable.

TIA!

Rules order is important.

So I applied that rule within iptables and I am still receiving these unwatned attempts.

###########################################################################
Dec 26 20:05:35 localhost sshd[26372]: Failed password for invalid user guest from ::ffff:211.189.116.220 port 56783 ssh2
Dec 26 20:05:39 localhost sshd[26375]: Invalid user admin from ::ffff:211.189.116.220
Dec 26 20:05:42 localhost sshd[26375]: Failed password for invalid user admin from ::ffff:211.189.116.220 port 57004 ssh2
Dec 26 20:05:45 localhost sshd[26378]: Invalid user admin from ::ffff:211.189.116.220
Dec 26 20:05:47 localhost sshd[26378]: Failed password for invalid user admin from ::ffff:211.189.116.220 port 57170 ssh2
Dec 26 20:05:50 localhost sshd[26381]: Invalid user user from ::ffff:211.189.116.220
Dec 26 20:05:52 localhost sshd[26381]: Failed password for invalid user user from ::ffff:211.189.116.220 port 57271 ssh2
Dec 26 20:05:57 localhost sshd[26384]: Failed password for root from ::ffff:211.189.116.220 port 57334 ssh2
#############################################################################

Do you need a snapshot of my table to discover the problem? again, I only want specific IP addy's to be able to ssh to my machine.

TIA!!!

It's IP version 6. So you need to use iptables for IPv6: ip6tables.

So here is a snippet of what I have so far, can you tell me what I am missing?

##################################################
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:RH-Firewall-1-INPUT - [0:0]
-A INPUT -j RH-Firewall-1-INPUT
-A FORWARD -j RH-Firewall-1-INPUT
-A RH-Firewall-1-INPUT -i lo -j ACCEPT
-A RH-Firewall-1-INPUT -i eth0 -j ACCEPT
-A RH-Firewall-1-INPUT -p icmp --icmp-type any -j ACCEPT
-A RH-Firewall-1-INPUT -p 50 -j ACCEPT
-A RH-Firewall-1-INPUT -p 51 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m tcp -s IP ADDY --dport 22 --syn -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m tcp -s IP ADDY --dport 22 --syn -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m tcp -s IP ADDY --dport 22 --syn -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m tcp --dport 22 -j DROP
###################################################

Sorry guys, I am a newbie and still getting me feet wet....

Make FORWARD to DENY (it's not safe). Don't know what's eth0, but you accept everything comming from it (the extra limitations on port are after this, so they don't work for traffic to eth0). Then you have three identical rules (-A RH-Firewall-1-INPUT -p tcp -m tcp -s IP ADDY --dport 22 --syn -j ACCEPT).

do one thing
1.Drop all the packets on all the chains i.e
iptables -P INPUT DROP
iptables -P OUTPUT DROP
iptables -P FORWARD DROP
2.Write rules for allowing ssh to your machine
iptables -t filter -A INPUT -s 0/0 -p tcp --dport 22 -d <yourip> -j ACCEPT
iptables -t filter -A OUTPUT -d 0/0 -p tcp --sport 22 -s <yourip> -j ACCEPT
This should solve your purpose