[CentOS] filtering ssh regardless of the port

Wed Sep 19 13:58:44 UTC 2007
David G. Miller <dave at davenjudy.org>

David Hrb?c( <hrbac.conf at seznam.cz> wrote:

> Bazy napsal(a):
>> > And yes... I will use layer 7 filtering.
>> > http://l7-filter.sourceforge.net/protocols
>> > 
>> > Patch my kernel, my iptables, and "iptables -A INPUT -m layer7 --l7proto
>> > ssh -j DROP"  ;) 
> Yes, the only way.
> D.
Silly question.  If you're just going to drop all ssh connection 
attempts, wouldn't it be easier to just not start sshd?  Ditto for 
telnet, etc?  No service means nothing to connect to.


Politics, n. Strife of interests masquerading as a contest of principles.
-- Ambrose Bierce