Re: iptables: block source-ip after connecto port

2012-01-04 Thread Reindl Harald
Am 04.01.2012 09:29, schrieb Patrick Lists: > On 04-01-12 06:54, Reindl Harald wrote: >> hi >> >> i would like to drop all icoming packets of any ip tried >> to connect to telnet (port 23) which is meant as trap >> for port-scans, there are some samples out there but i got >> none of them working

Re: iptables: block source-ip after connecto port

2012-01-04 Thread Patrick Lists
On 04-01-12 06:54, Reindl Harald wrote: hi i would like to drop all icoming packets of any ip tried to connect to telnet (port 23) which is meant as trap for port-scans, there are some samples out there but i got none of them working until now :-( iptables -N port-scan iptables -A port-scan -p

iptables: block source-ip after connecto port

2012-01-03 Thread Reindl Harald
hi i would like to drop all icoming packets of any ip tried to connect to telnet (port 23) which is meant as trap for port-scans, there are some samples out there but i got none of them working until now :-( iptables -N port-scan iptables -A port-scan -p tcp --dport 23 --tcp-flags ALL SYN -m limi