9 lines
516 B
Bash
Executable File
9 lines
516 B
Bash
Executable File
#!/bin/bash
|
|
|
|
#comment from http://web.archive.org/web/20130510023127/http://blog.bigdinosaur.org/securing-ssh-with-iptables/
|
|
iptables -A INPUT -p tcp -m tcp --dport 22 -m state --state NEW -m recent --set --name DEFAULT --rsource
|
|
iptables -N LOG_AND_DROP
|
|
iptables -A INPUT -p tcp -m tcp --dport 22 -m state --state NEW -m recent --update --seconds 60 --hitcount 4 --name DEFAULT --rsource -j LOG_AND_DROP
|
|
iptables -A LOG_AND_DROP -j LOG --log-prefix "iptables deny: " --log-level 7
|
|
iptables -A LOG_AND_DROP -j DROP
|