How to block an IP by iptables (Red hat 6.2)<\/p>\n\n\n\n
Solution 1:<\/p>\n\n\n\n
Adjust the config file:<\/p>\n\n\n\n
Vim \/etc\/sysconfig\/iptables<\/p>\n\n\n\n
Solution 2:<\/p>\n\n\n\n
Syntax to block an IP address under Linux<\/p>\n\n\n\n
iptables -A INPUT -s IP-ADDRESS -j DROP<\/p>\n\n\n\n
Replace IP-ADDRESS with your actual IP address. For example, if you wish to block an ip address 65.55.44.100 for whatever reason then type the command as follows:
# iptables -A INPUT -s 65.55.44.100 -j DROP
If you have IP tables firewall script, add the above rule to your script.<\/p>\n\n\n\n
If you just want to block access to one port from an ip 65.55.44.100 to port 25 then type command:
# iptables -A INPUT -s 65.55.44.100 -p tcp –destination-port 25 -j DROP
The above rule will drop all packets coming from IP 65.55.44.100 to port mail server port 25.<\/p>\n\n\n\n
CentOS \/ RHEL \/ Fedora Block An IP And Save It To Config File<\/p>\n\n\n\n
Type the following two command:
# iptables -A INPUT -s 65.55.44.100 -j DROP
# service iptables save<\/p>\n\n\n\n
How Do I Unblock An IP Address?<\/p>\n\n\n\n
Use the following syntax (the -d options deletes the rule from table):
# iptables -D INPUT -s xx.xxx.xx.xx -j DROP
# iptables -D INPUT -s 65.55.44.100 -j DROP
# service iptables save<\/p>\n\n\n\n
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~<\/p>\n\n\n\n
Below, it is a real sample from on my web server<\/p>\n\n\n\n
Filename: \/etc\/sysconfig\/iptables<\/p>\n\n\n\n
# Generated by iptables-save v1.4.7 on Fri Sep 9 13:20:32 2016<\/p>\n\n\n\n
*filter<\/p>\n\n\n\n
:INPUT ACCEPT [0:0]<\/p>\n\n\n\n
:FORWARD ACCEPT [0:0]<\/p>\n\n\n\n
:OUTPUT ACCEPT [37846:10291259]<\/p>\n\n\n\n
-A INPUT -s 37.1.213.195\/32 -j DROP<\/p>\n\n\n\n
-A INPUT -s 191.96.249.53\/32 -p tcp -m tcp –dport 443 -j DROP<\/p>\n\n\n\n
-A INPUT -s 191.96.249.53\/32 -p tcp -m tcp –dport 80 -j DROP<\/p>\n\n\n\n
-A INPUT -s 191.96.249.54\/32 -p tcp -m tcp –dport 80 -j DROP<\/p>\n\n\n\n
-A INPUT -s 191.96.249.54\/32 -p tcp -m tcp –dport 443 -j DROP<\/p>\n\n\n\n
-A INPUT -p tcp -m tcp –dport 2323 -j ACCEPT<\/p>\n\n\n\n
-A INPUT -m state –state RELATED,ESTABLISHED -j ACCEPT<\/p>\n\n\n\n
-A INPUT -p icmp -j ACCEPT<\/p>\n\n\n\n
-A INPUT -p tcp -m tcp –dport 20001:21000 -j ACCEPT<\/p>\n\n\n\n
-A INPUT -i lo -j ACCEPT<\/p>\n\n\n\n
-A INPUT -p tcp -m state –state NEW -m tcp –dport 22 -j ACCEPT<\/p>\n\n\n\n
-A INPUT -p tcp -m state –state NEW -m tcp –dport 80 -j ACCEPT<\/p>\n\n\n\n
-A INPUT -p tcp -m state –state NEW -m tcp –dport 443 -j ACCEPT<\/p>\n\n\n\n
-A INPUT -p tcp -m state –state NEW -m tcp –dport 631 -j ACCEPT<\/p>\n\n\n\n
-A INPUT -j REJECT –reject-with icmp-host-prohibited<\/p>\n\n\n\n
-A FORWARD -j REJECT –reject-with icmp-host-prohibited<\/p>\n\n\n\n
COMMIT<\/p>\n\n\n\n
# Completed on Fri Sep 9 13:20:32 2016<\/p>\n","protected":false},"excerpt":{"rendered":"
How to block an IP by iptables (Red hat 6.2) Solution 1: Adjust the config file: Vim \/etc\/sysconfig\/iptables Solution 2: Syntax to block an IP address under Linux iptables -A INPUT -s IP-ADDRESS -j DROP Replace IP-ADDRESS with your actual IP address. For example, if you wish to block an ip address 65.55.44.100 for whatever Read More<\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_bbp_topic_count":0,"_bbp_reply_count":0,"_bbp_total_topic_count":0,"_bbp_total_reply_count":0,"_bbp_voice_count":0,"_bbp_anonymous_reply_count":0,"_bbp_topic_count_hidden":0,"_bbp_reply_count_hidden":0,"_bbp_forum_subforum_count":0,"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[5],"tags":[],"class_list":["post-350","post","type-post","status-publish","format-standard","hentry","category-linux"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\t