Blog
Posts: 6
Limiting the Number of Connections To protect against brute force (password guessing) attacks, you can limit the number of connections to port 22 from a single IP address to a few attempts per minute, after which connection attempts from that IP will be blocked. The `recent` module is a kernel module (Core…
First, let's define the variables: $ cat /etc/balance/vars #!/bin/bash # LAN interface IF0= "eth1" # WAN interface 1 IF1= "eth0" # WAN interface 2 IF2= "ppp0" IP1= "194.9.xx.xx" IP2= "`ip addr show $IF2 | grep inet | awk '{print $2}'`" #…
#!/bin/sh ### IPTables Configuration Script ### # Clear previous iptables rules iptables -F # Set default policies iptables -P INPUT DROP iptables -P FORWARD ACCEPT iptables -P OUTPUT ACCEPT # Allow the loopback interface iptables -A INPUT -i lo -j ACCEPT…
Option 1. Limiting connections. iptables -A INPUT -p tcp --dport 22 -m recent --name ssh --update --seconds 3600 --hitcount 5 -j REJECT iptables -A INPUT -p tcp --dport 22 -m recent --name ssh --set -j ACCEPT The rule allows 5 connections...
