how u use the iptable firewall to restrict ssh,telnet,ftp
Answers were Sorted based on User's Feedback
Answer / sins
simply use..... iptables -A INPUT -s <sourse ip or n/w u
want to block the services> -p tcp --dport <specify prt
number> -j REJECT/DROP/DENY
| Is This Answer Correct ? | 26 Yes | 0 No |
Answer / rajesh dwivedi
If you restrict ssh/telnet or ftp u have to write a rule
for example u have to restrict ssh
IPTABLES -A INPUT -p tcp -s <IP Address or Domain IP> --
dport <ssh port> -j REJECT/DROP
| Is This Answer Correct ? | 12 Yes | 0 No |
For SSH
iptables -A INPUT -s <sourse ip or n/w u
want to block the services> -p tcp --dport <22> -j
REJECT/DROP/DENY
For Telnet
iptables -A INPUT -s <sourse ip or n/w u
want to block the services> -p tcp --dport <23> -j
REJECT/DROP/DENY
For FTP
iptables -A INPUT -s <sourse ip or n/w u
want to block the services> -p tcp --dport <21> -j
REJECT/DROP/DENY
| Is This Answer Correct ? | 6 Yes | 0 No |
Answer / srivathsan
Just a small typo to the file name, it is '/etc/hosts.deny'
Thanks,
- Vathsan.
| Is This Answer Correct ? | 5 Yes | 2 No |
Answer / swapnil
if want to put on the INPUT then
iptables -A INPUT -s source -p protocol --dport destination
port -j DENY
if want to put the OUTPUT tables then
iptables -A OUTPUT -s source -p protocol --dport denation
port -j DENY
| Is This Answer Correct ? | 2 Yes | 0 No |
Answer / srivathsan
Followed by iptables command mentioned by Sins to restrict
domains for various services, pleaese run
$ service iptables save
$ restorecon /etc/sysconfig/iptables.
Also, you could block the domains by adding an entry inside
/etc/hots.deny like,
sshd: <Unwanted domain url>
:qw to save changes to the file.
- Vathsan.
| Is This Answer Correct ? | 4 Yes | 3 No |
Answer / nrupan mampilly
iptables -I INPUT -t filter -s source -p protocol --dport
portnumber -j REJECT
| Is This Answer Correct ? | 0 Yes | 0 No |
Answer / anil kumar pinnaka
chkconfig --level < run level for enabling the iptables > on
This will enables the ip table for the given run level.
so that these service will ge blocked.
| Is This Answer Correct ? | 1 Yes | 15 No |
I want to send pop-up message to samba users when they access the shared folder.... for eg: i want to tell them (dont copy mp3 and video files)
Where is standard output usually directed?
Give a Linux shell command to find all files in a directory which contain ip addresses.
How to ""Add"" not replace address to same network card other than the alias way.... ??????
what are the different types of Backups..?
how to install linux OS? pls send step by step
What are main anti-spam features available in sendmail?
What is Hard mount and soft Mount?
1.how to know cpu information on linux system? 2.how to hardware information on linux system? 3.if we add the new user what are the files will be changed? 4.how to remove the cache in squid server ? 5.how to know ur useing 32bit r 64 bit os ? 6.at booting process at init level which file it is reads? 7.if ur system performance is show what can u do ? 8.if ur file system corrupted what can u do ? fsck also not working? 9.how did u do health check in linux? 10.how did u check system performance in linux? 11.how did u create NIS server? give me the steps ? 12.how did u add a packages in linux ? 13.how did u know depended packages for any package useing rpm how u know? 14.how did you monitor cronjobs in linux ? 15.what is the use of logroted? and how did u do ? 16.port no is already in use so what canu do for that in http? 17.how to samba configurated are not ? there are any command for that ? 18.how to create a NTP Client using commands ? not as graphical... 19.how to know how many members are using any service? like ftp are any other services? 20.what is the differences between cmp,diff,comm commands?
What are the differences between FTP , NFS , SAMBA servers explain separately.
what is difference between inetd and xinetd
expalin the process of kickstart installation?