Re: [CentOS] iptables - how to block established connections with fail2ban?

2019-06-28 Thread Bowie Bailey
On 6/26/2019 2:41 AM, MRob wrote: > I am working to a CentOS 6 server with nonstandard iptables system without > rule for > ACCEPT ESTABLISHED connections. All tables and chains empty (flush by legacy > custom > script) so only filter/INPUT chain has rules (also fail2ban chain): > > Chain INPUT (

Re: [CentOS] iptables - how to block established connections with fail2ban?

2019-06-27 Thread Gordon Messmer
On 6/25/19 11:41 PM, MRob wrote: When fail2ban block a IP address, established connections are allowed to continue, but with no rule to accept established connections how is that possible? It doesn't look like it would be. 1: Open a connection that will demonstrate the problem later. 2: Trig

Re: [CentOS] iptables - how to block established connections with fail2ban?

2019-06-27 Thread Roberto Ragusa
On 6/26/19 8:41 AM, MRob wrote: I am working to a CentOS 6 server with nonstandard iptables system without rule for ACCEPT ESTABLISHED connections. All tables and chains empty (flush by legacy custom script) so only filter/INPUT chain has rules (also fail2ban chain): Chain INPUT (policy ACCEP

Re: [CentOS] iptables - how to block established connections with fail2ban?

2019-06-26 Thread Mike Burger
On 2019-06-26 02:41, MRob wrote: I am working to a CentOS 6 server with nonstandard iptables system without rule for ACCEPT ESTABLISHED connections. All tables and chains empty (flush by legacy custom script) so only filter/INPUT chain has rules (also fail2ban chain): Chain INPUT (policy ACCEPT)

[CentOS] iptables - how to block established connections with fail2ban?

2019-06-25 Thread MRob
I am working to a CentOS 6 server with nonstandard iptables system without rule for ACCEPT ESTABLISHED connections. All tables and chains empty (flush by legacy custom script) so only filter/INPUT chain has rules (also fail2ban chain): Chain INPUT (policy ACCEPT) target prot opt source