จอมยุทธ์.เน็ต

• Home
• Quotes
• Trends
• Wish List

SSH and iptables

• -A INPUT -m tcp -p tcp –dport 22 -m state –state ESTABLISHED,RELATED -j ACCEPT
• -A INPUT -m tcp -p tcp -s 10.1.0.0/24 –dport 22 -j ACCEPT
• -A INPUT -m tcp -p tcp –dport 22 -m state –state NEW -m limit –limit 3/min –limit-burst 3 -j ACCEPT
• -A INPUT -m tcp -p tcp –dport 22 -j DROP

Source: http://www.tummy.com/journals/entries/jafo_20050724_172920