base_version

2025-03-24 21:39:18 +08:00
commit 6aa0242e31
1 changed files with 8 additions and 0 deletions
@@ -0,0 +1,8 @@
+#!/bin/bash
+
+#comment from http://web.archive.org/web/20130510023127/http://blog.bigdinosaur.org/securing-ssh-with-iptables/
+iptables -A INPUT -p tcp -m tcp --dport 22 -m state --state NEW -m recent --set --name DEFAULT --rsource
+iptables -N LOG_AND_DROP
+iptables -A INPUT  -p tcp -m tcp --dport 22 -m state --state NEW -m recent --update --seconds 60 --hitcount 4 --name DEFAULT --rsource -j LOG_AND_DROP
+iptables -A LOG_AND_DROP -j LOG --log-prefix "iptables deny: " --log-level 7
+iptables -A LOG_AND_DROP -j DROP