[arm-allstar] Blocking incoming specific IP's

[Doug Crompton]

If you are on a nat'ed network it would certainly make sense to block it in
the router and keep it our of your LAN. Is it trying to hit a specific
port? Is it a port Allstar uses?


*73 Doug*

*WA3DSP*

*http://www.crompton.com/hamradio <http://www.crompton.com/hamradio>*


On Sun, Aug 19, 2018 at 1:21 PM, "James Hause via arm-allstar" <
arm-allstar at hamvoip.org> wrote:

> Hi Bill,
>   I am not an expert on this at all, so hopefully you will get a better
> answer.
> Believe the router that I have my simplex node allows one to go into
> advanced settings and block static IP addresses.
> Jim
>
> On Sun, Aug 19, 2018 at 11:08 AM, "Mr. Possum (Bill) via arm-allstar" <
> arm-allstar at hamvoip.org> wrote:
>
> > When I was working on one of my nodes this morning I noticed that I am
> > getting HAMMERED by some IP over in france that has been reported for
> IPBX
> > probing....
> > Here's the output on my CLI -
> >
> >
> >   == Connect attempt from '212.83.150.74' unable to authenticate
> >   == Connect attempt from '212.83.150.74' unable to authenticate
> >   == Connect attempt from '212.83.150.74' unable to authenticate
> >   == Connect attempt from '212.83.150.74' unable to authenticate
> >   == Connect attempt from '212.83.150.74' unable to authenticate
> >   == Connect attempt from '212.83.150.74' unable to authenticate
> >   == Connect attempt from '212.83.150.74' unable to authenticate
> >   == Connect attempt from '212.83.150.74' unable to authenticate
> >   == Connect attempt from '212.83.150.74' unable to authenticate
> >   == Connect attempt from '212.83.150.74' unable to authenticate
> >   == Connect attempt from '212.83.150.74' unable to authenticate
> >   == Connect attempt from '212.83.150.74' unable to authenticate
> >   == Connect attempt from '212.83.150.74' unable to authenticate
> >   == Connect attempt from '212.83.150.74' unable to authenticate
> >   == Connect attempt from '212.83.150.74' unable to authenticate
> >   == Connect attempt from '212.83.150.74' unable to authenticate
> > Independence*CLI>
> >
> > It hits every couple of seconds...
> > Here's the info on the Ip address - https://www.abuseipdb.com/
> > check/212.83.150.74
> > What I would like to do is use something like ipset to just block that
> > specific IP address....  But I find that ipset isn't on our little RasPi
> > images...
> > So, does anyone have a suggestion to easily block some IP's off of a
> list?
> > Thanks!
> > Bill - N5MBM
> >
> >
> >
> >
> > _______________________________________________
> >
> > arm-allstar mailing list
> > arm-allstar at hamvoip.org
> > http://lists.hamvoip.org/cgi-bin/mailman/listinfo/arm-allstar
> >
> > Visit the BBB and RPi2/3 web page - http://hamvoip.org
> _______________________________________________
>
> arm-allstar mailing list
> arm-allstar at hamvoip.org
> http://lists.hamvoip.org/cgi-bin/mailman/listinfo/arm-allstar
>
> Visit the BBB and RPi2/3 web page - http://hamvoip.org
>