hi

Dvije ip adrese ovih dana intezivno napadaju moj server koristeci jednu moju liniju da se preko nje logiraju.
Za posljedicu ima da mi prozes CCcam pada svakih par minuta.
Na ruteru ne mogu blokirati pristup ove dvije IP adrese.
Kako mogu najefikasnije na serveru blokirati.
Server Ubuntu 9.04

Ukoliko pozeljno mogu ove dvije IP postaviti u postu.

Pozdrav
matteo

hi,

Liniju sam zatvorio, ali imam jos uvijek attacke:

11:50:54.757 CCcam: new tcp client from 77.46.221.107
11:50:55.622 CCcam: illegal user brasko from 77.46.221.107
11:50:55.622 CCcam: deleting client 77.46.221.107, signature failed
11:50:57.722 CCcam: new tcp client from 109.92.234.166
11:50:58.671 CCcam: illegal user brasko from 109.92.234.166
11:50:58.671 CCcam: deleting client 109.92.234.166, signature failed

pokusao sam u /etc/hosts.deny ove IP ubaciti, ali neznam da li je syntax dobar:

ALL: 77.46.221.107,
ALL: 109.92.234.166,


moze li mi ko pomoci da li je syntax ok?

Pozdrav,
matteo

hi,

jedan zgodan syntax funkcionira ovako:
root@ubuntu:~# iptables -L INPUT
Chain INPUT (policy ACCEPT)
target   prot opt source        destination
root@ubuntu:~# iptables -A INPUT -s 41.251.29.96 -j DROP
root@ubuntu:~# iptables -A INPUT -s 77.46.221.107 -j DROP
root@ubuntu:~# iptables -A INPUT -s 109.92.234.166 -j DROP
root@ubuntu:~# iptables -L INPUT
Chain INPUT (policy ACCEPT)
target   prot opt source        destination
DROP    all -- 41.251.29.96     anywhere
DROP    all -- 77-46-221-107.dynamic.isp.telekom.rs anywhere
DROP    all -- 109-92-234-166.dynamic.isp.telekom.rs anywhere
root@ubuntu:~#

pozdrav
matteo