-----Original Message----- From: centos-bounces@centos.org [mailto:centos-bounces@centos.org] On Behalf Of Jorge Fábregas Sent: 26 September 2011 01:09 PM To: centos@centos.org Subject: Re: [CentOS] Hacking Issue
On 09/26/2011 07:02 AM, Jennifer Botten wrote:
-A INPUT -i eth0 -d 209.61.231.42 -p udp -j DROP
This needs to be:
-A OUTPUT -i eth0 -d 209.61.231.42 -p udp -j DROP
...if you want to drop packets initiated from your system to that ip...which doesn't make any sense if you're dropping all the incoming connection from that ip.
On why are you still getting packets from that ip... perhaps there's also TCP traffic? If you want to completely drop packets from that ip simply remove the protocol argument like this:
-A INPUT -i eth0 -s 209.61.231.42 -j DROP
HTH, Jorge _______________________________________________ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Hi Jorge,
I am blocking UDP and TCP from that IP. I also have an OUTPUT rule however mine has the -o eth0 as the -i eth0 does not work.
Regards Jennifer