Re: [CentOS] Re: Simple IPTABLES Question

--On Wednesday, August 20, 2008 10:01 AM -0500 Matt <[EMAIL PROTECTED]> wrote: Would it be better to TARPIT rather then DROP the packets? Is TARPIT compiled into the default kernel? Back when I thought it (and several other netfilter modules) might be interesting to play with, it was still

[CentOS] Re: Simple IPTABLES Question

> I added these rules to IPTABLES to slow brute force attacks. > > iptables -A INPUT -p tcp --dport 22 -s my_subnet/24 -j ACCEPT > iptables -A INPUT -p tcp --dport 22 -m state --state NEW -m recent > --set --name SSH > iptables -A INPUT -p tcp --dport 22 -m state --state NEW -m recent > --update --