Re: active iptables update

On Wed, Feb 05, 2003 at 01:02:46PM -0800, Tom O'Toole wrote: >On Mon, 3 Feb 2003, George Georgalis wrote: > >> I was thinking along these lines; forward malicious requests to some >> ip on the 127.0.0.0/8 network where tcpdump would be listening ready >> to trigger a script that inserts a new drop

active iptables update

I'm looking for a way to add iptable rules per connection profiles. So if a particular IP triggers an action (-j), an iptables rule (such as drop all connections from that IP) is inserted in the appropriate table. The idea is to block an abusive IP while not interrupting regular service. I know th