Linode Forum
https://forum.linode.com/

Best way to block IPs completely from Linode?
https://forum.linode.com/viewtopic.php?f=19&t=984
Page 1 of 1

Author:  Crisis [ Tue Jun 29, 2004 8:16 am ]
Post subject:  Best way to block IPs completely from Linode?

I am wondering what the best way to block certains IPs from a Linode would be.

Would it be best to install a full firewall product? My main concern is something like iptables seems to need a custom kernel, and I do not know anything about UML or the way the kernel works in a UML environment.

I am very comfortable re-compiling kernels on normal boxes, but I am not sure how this would affect a linode.

Anyone have any suggestions?

Author:  Ciaran [ Tue Jun 29, 2004 9:40 am ]
Post subject: 

iptables doesn't need a custom kernel. It's true that iptables is controlled from kernel options, but most kernels - including the standard ones on Linode - enable it by default.

I'm not quite sure how to use it myself, but I can tell you that it's enabled and works - at least on my Linode, and I haven't done anything special with iptables.

Author:  Crisis [ Tue Jun 29, 2004 10:56 am ]
Post subject: 

Hmm I tried to emerge iptables in gentoo on my linode, but it would not compile because it could not access the kernel source.

Any ideas? I coudl emerge one of the various kernel sources but I would wonder if it is different the the actual kernel being used on the linode.

Author:  Joshua [ Tue Jun 29, 2004 11:01 am ]
Post subject: 

iptables comesby deafult because it is required by the kernal to run (i think does on my home box) so try that i use webmin to edit my tptables rules

Author:  fieschko [ Tue Jun 29, 2004 11:54 am ]
Post subject:  Re: Best way to block IPs completely from Linode?

Crisis wrote:
I am wondering what the best way to block certains IPs from a Linode would be.

If you already know which ips you want to block, put the ips in /etc/hosts.deny . (ALL: aaa.bbb.ccc.ddd)

Author:  Crisis [ Tue Jun 29, 2004 12:32 pm ]
Post subject: 

Will /etc/hosts.deny block all traffic from those IPS (TCP, UDP, ICMP etc) ?

Author:  caker [ Tue Jun 29, 2004 12:37 pm ]
Post subject: 

Crisis wrote:
Hmm I tried to emerge iptables in gentoo on my linode, but it would not compile because it could not access the kernel source.

Lame bug in Gentoo. From another Linode user: "One work-around is to comment out the check_KV function in the iptables build."

All it wants is version.h...

-Chris

Author:  Crisis [ Tue Jun 29, 2004 12:50 pm ]
Post subject: 

Thanks I got it installed and have been able to add rules to block IPs ;)

Author:  fieschko [ Tue Jun 29, 2004 12:58 pm ]
Post subject: 

Crisis wrote:
Will /etc/hosts.deny block all traffic from those IPS (TCP, UDP, ICMP etc) ?

man hosts_access

Page 1 of 1 All times are UTC-04:00
Powered by phpBB® Forum Software © phpBB Group
http://www.phpbb.com/