[prev in list] [next in list] [prev in thread] [next in thread] 

List:       gentoo-user
Subject:    Re: [gentoo-user] IPtables question
From:       Norberto Bensa <nbensa () gmx ! net>
Date:       2007-02-01 3:58:35
Message-ID: 200702010058.35787.nbensa () gmx ! net
[Download RAW message or body]

James Colby wrote:
> currently forwarding all ssh traffic to my gentoo box.  What I would
> like to do is set up iptables to only allow ssh logins from a small
> number of internet hosts, 

iptables -A INPUT -s ip-address-of-know-host --dport 22 -j ACCEPT


> and to reject and log all other ssh 
> attempts.  

iptables -A INPUT --dport 22 -j LOG
iptables -A INPUT --dport 22 -j REJECT

Regards,
Norberto


[Attachment #3 (application/pgp-signature)]
-- 
gentoo-user@gentoo.org mailing list


[prev in list] [next in list] [prev in thread] [next in thread]