Set up the rules in /etc/iptables.up.rules
Flush the iptable

iptables -F

Restore the iptable

iptables-restore < /etc/iptables.up.rules\\

Evaluate the iptable

iptables -L

iptables -N SSHSECURE
iptables -A SSHSECURE -j LOG --log-prefix "SSH intrusion attempt" --log-level 7
iptables -A SSHSECURE -j DROP

iptables -A INPUT -i eth0 -p tcp -m state --dport 22 --state NEW -m recent --set
iptables -A INPUT -i eth0 -p tcp -m state --dport 22 --state NEW -m recent --update --seconds 240 --hitcount 10 -j SSHSECURE

iptables -A INPUT -i eth0 -p tcp -m state --dport 22 --state NEW -m recent --set --name ssh -j ACCEPT
iptables -A INPUT -i eth0 -p tcp -m state --dport 22 --state NEW -m recent --update --seconds 120 --hitcount 7 --rttl  --name ssh -j DROP

iptables example

Main subjects on this wiki: Linux, Debian, HTML, Microcontrollers, Privacy

RSS
Disclaimer
Privacy statement
Bugs statement
Cookies
Copyright © : 2014 - 2022 Webevaluation.nl and the authors
Changes reserved.