[CentOS] filtering ssh regardless of the port

David G. Miller dave at davenjudy.org
Wed Sep 19 13:58:44 UTC 2007

David Hrb?c( <hrbac.conf at seznam.cz> wrote:

> Bazy napsal(a):
>> > And yes... I will use layer 7 filtering.
>> > http://l7-filter.sourceforge.net/protocols
>> > 
>> > Patch my kernel, my iptables, and "iptables -A INPUT -m layer7 --l7proto
>> > ssh -j DROP"  ;) 
> Yes, the only way.
> D.
Silly question.  If you're just going to drop all ssh connection 
attempts, wouldn't it be easier to just not start sshd?  Ditto for 
telnet, etc?  No service means nothing to connect to.


Politics, n. Strife of interests masquerading as a contest of principles.
-- Ambrose Bierce

More information about the CentOS mailing list