ipchains and iptables to block IP address

| May 16, 2011 | 1 Comment

If you want to block access to your server for whatever reason, you will need to log into the
shell as root. Your server should either have ipchains or iptables to help accomplish this.

In this example, the attacking IP is 192.168.56.210 .

If you are using ipchains, type “ipchains -A input -j DENY -p all -l -s 192.168.56.210/32″
If you are using iptables, type “iptables -A INPUT -s 192.168.56.210/32 -j DROP”

If you just want to block access to one port from an ip :

iptables -A INPUT -s 192.168.56.210/32 -p tcp –destination-port 23 -j DROP

The above would drop all packets from 192.168.56.210/32 to port 23 (telnet) on the server

Tags: , , ,

Category: Linux Administration

Leave a Reply

You must be logged in to post a comment.