> I'm using the Dachstein version of LRP. How do I reject a specific IP?
> I'm running LaBrea on another machine and notice the same IP
> portscanning our network.
Temporary block:
ipchains -I input -j DENY -s
Permanent block:
Put the above line in /etc/ipchains.input.
Charles Steinkuehl
If it doesn't already exist, create a file /etc/ipchains.input and add
the following line:
ipchains -I input -j DENY -s 111.111.111.111/32 -i eth0 -l
(obviously replace 111.111.111.111 with the real IP to block)
You'll need to run:
svi network ipfilter reload
To reload the rules. You can use
