[arm-allstar] Blocking incoming specific IP's

[David McGough]

Hi Bill,

iptables will easily solve this problem. For example, to append a ruleset:


iptables -A INPUT -i eth0 -s 212.83.150.74 -j DROP


And, to remove the same rule:

iptables -D INPUT -i eth0 -s 212.83.150.74 -j DROP


73, David KB4FXC




On Sun, 19 Aug 2018, "Mr. Possum (Bill) via arm-allstar" wrote:

> When I was working on one of my nodes this morning I noticed that I am getting HAMMERED by some IP over in france that has been reported for IPBX probing....
Here's the output on my CLI - 


  == Connect attempt from '212.83.150.74' unable to authenticate
  == Connect attempt from '212.83.150.74' unable to authenticate
  == Connect attempt from '212.83.150.74' unable to authenticate
  == Connect attempt from '212.83.150.74' unable to authenticate
  == Connect attempt from '212.83.150.74' unable to authenticate
  == Connect attempt from '212.83.150.74' unable to authenticate
  == Connect attempt from '212.83.150.74' unable to authenticate
  == Connect attempt from '212.83.150.74' unable to authenticate
  == Connect attempt from '212.83.150.74' unable to authenticate
  == Connect attempt from '212.83.150.74' unable to authenticate
  == Connect attempt from '212.83.150.74' unable to authenticate
  == Connect attempt from '212.83.150.74' unable to authenticate
  == Connect attempt from '212.83.150.74' unable to authenticate
  == Connect attempt from '212.83.150.74' unable to authenticate
  == Connect attempt from '212.83.150.74' unable to authenticate
  == Connect attempt from '212.83.150.74' unable to authenticate
Independence*CLI>

It hits every couple of seconds...
Here's the info on the Ip address - https://www.abuseipdb.com/check/212.83.150.74
What I would like to do is use something like ipset to just block that specific IP address....  But I find that ipset isn't on our little RasPi images...
So, does anyone have a suggestion to easily block some IP's off of a list?
Thanks!
Bill - N5MBM




_______________________________________________

arm-allstar mailing list
arm-allstar at hamvoip.org
http://lists.hamvoip.org/cgi-bin/mailman/listinfo/arm-allstar

Visit the BBB and RPi2/3 web page - http://hamvoip.org