Hi all
Can iptables have log and deny rule together? if no. how can I make a deny rule and log rule and the log rule can limit the log entry eg: 200 if yes, how can I make it
I am using freebsd ipfw. eg: ipfw add 22 deny log all from any to x.x.x.x
thank you
____________________________________________________________________________________ Take the Internet to Go: Yahoo!Go puts the Internet in your pocket: mail, news, photos & more. http://mobile.yahoo.com/go?refer=1GNXIC
Something along these lines should do the job for ya.
iptables -A INPUT -s 0.0.0.0/0 -d x.x.x.x/32 -m hashlimit --hashlimit 200 --hashlimit-mode dstip -j LOG iptables -A INPUT -s 0.0.0.0/0 -d x.x.x.x/32 -j DROP
Dig around on this site for more details. http://iptables-tutorial.frozentux.net/iptables-tutorial.html
-----Original Message----- From: centos-bounces@centos.org [mailto:centos-bounces@centos.org] On Behalf Of ann kok Sent: Wednesday, June 20, 2007 10:46 AM To: centos@centos.org Subject: [CentOS] iptables question
Hi all
Can iptables have log and deny rule together? if no. how can I make a deny rule and log rule and the log rule can limit the log entry eg: 200 if yes, how can I make it
I am using freebsd ipfw. eg: ipfw add 22 deny log all from any to x.x.x.x
thank you
________________________________________________________________________ ____________ Take the Internet to Go: Yahoo!Go puts the Internet in your pocket: mail, news, photos & more. http://mobile.yahoo.com/go?refer=1GNXIC _______________________________________________ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
I believe that iptables is different than freebsd's ipfw. I don't think the rules would be expressed the same way. Am I wrong? -chaz Charles L. Sliger, Information Systems Engineer chaz@bctonline.com {Yahoo: chaz_sliger} {Google: chaz.sliger}
-----Original Message----- From: centos-bounces@centos.org [mailto:centos-bounces@centos.org] On Behalf Of ann kok Sent: Wednesday, June 20, 2007 7:46 AM To: centos@centos.org Subject: [CentOS] iptables question
Hi all
Can iptables have log and deny rule together? if no. how can I make a deny rule and log rule and the log rule can limit the log entry eg: 200 if yes, how can I make it
I am using freebsd ipfw. eg: ipfw add 22 deny log all from any to x.x.x.x
thank you
Take the Internet to Go: Yahoo!Go puts the Internet in your pocket: mail, news, photos & more. http://mobile.yahoo.com/go?refer=1GNXIC _______________________________________________ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
They certainly are different... But if he wanted that feature in iptables he could use the rule I specified. I was under the impression he was looking to migrate...
That certainly may have been an assumption on my part.
-----Original Message----- From: centos-bounces@centos.org [mailto:centos-bounces@centos.org] On Behalf Of Charles Sliger Sent: Wednesday, June 20, 2007 12:48 PM To: 'CentOS mailing list' Subject: RE: [CentOS] iptables question
I believe that iptables is different than freebsd's ipfw. I don't think the rules would be expressed the same way. Am I wrong? -chaz Charles L. Sliger, Information Systems Engineer chaz@bctonline.com {Yahoo: chaz_sliger} {Google: chaz.sliger}
-----Original Message----- From: centos-bounces@centos.org [mailto:centos-bounces@centos.org] On Behalf Of ann kok Sent: Wednesday, June 20, 2007 7:46 AM To: centos@centos.org Subject: [CentOS] iptables question
Hi all
Can iptables have log and deny rule together? if no. how can I make a deny rule and log rule and the log rule can limit the log entry eg: 200 if yes, how can I make it
I am using freebsd ipfw. eg: ipfw add 22 deny log all from any to x.x.x.x
thank you
Take the Internet to Go: Yahoo!Go puts the Internet in your pocket: mail, news, photos & more. http://mobile.yahoo.com/go?refer=1GNXIC _______________________________________________ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
_______________________________________________ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Oh. OK. That would make sense. Carry on :-)
Charles L. Sliger, Information Systems Engineer chaz@bctonline.com {Yahoo: chaz_sliger} {Google: chaz.sliger}
-----Original Message----- From: centos-bounces@centos.org [mailto:centos-bounces@centos.org] On Behalf Of Ashton, Jeremy - Workstream Inc. Sent: Wednesday, June 20, 2007 9:52 AM To: CentOS mailing list Subject: RE: [CentOS] iptables question
They certainly are different... But if he wanted that feature in iptables he could use the rule I specified. I was under the impression he was looking to migrate...
That certainly may have been an assumption on my part.
-----Original Message----- From: centos-bounces@centos.org [mailto:centos-bounces@centos.org] On Behalf Of Charles Sliger Sent: Wednesday, June 20, 2007 12:48 PM To: 'CentOS mailing list' Subject: RE: [CentOS] iptables question
I believe that iptables is different than freebsd's ipfw. I don't think the rules would be expressed the same way. Am I wrong? -chaz Charles L. Sliger, Information Systems Engineer chaz@bctonline.com {Yahoo: chaz_sliger} {Google: chaz.sliger}
-----Original Message----- From: centos-bounces@centos.org [mailto:centos-bounces@centos.org] On Behalf Of ann kok Sent: Wednesday, June 20, 2007 7:46 AM To: centos@centos.org Subject: [CentOS] iptables question
Hi all
Can iptables have log and deny rule together? if no. how can I make a deny rule and log rule and the log rule can limit the log entry eg: 200 if yes, how can I make it
I am using freebsd ipfw. eg: ipfw add 22 deny log all from any to x.x.x.x
thank you
Take the Internet to Go: Yahoo!Go puts the Internet in your pocket: mail, news, photos & more. http://mobile.yahoo.com/go?refer=1GNXIC _______________________________________________ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos _______________________________________________ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
-
ann kok -
Ashton, Jeremy - Workstream Inc. -
Charles Sliger