Web Hosting Talk : Web Hosting Main Forums : Hosting Security and Technology : How I can block all traffic to one of IPs on server with iptables?

[gurika]

Somebody know how I can block ALL traffic to one IP on my server (destination ip) with iptables??

And how I can remove that ip from blocking list?

Thanks.

[layer0]

To block an IP use:

/sbin/iptables -A INPUT -s 1.1.1.1 -j REJECT

To unblock an IP use:

/sbin/iptables -A INPUT -s 1.1.1.1 -j ACCEPT

To unblock all IPs use:

iptables -F

Thanks,

[Sheps]

Ah.... I wouldn't use -F unless you change your default policies to allow. Might cause some unexpected problems(It blokcing everything for example.

[gurika]

Great!!

And one more question, how I can block only one port (80)??

Thanks.

[HP-Jonathan]

iptables -A INPUT -p tcp --destinataion-port 80 -j REJECT

will do everything to port 80

iptables -A INPUT -p tcp -s 1.1.1.1 --destination-port 80 -j REJECT

would block it for only stuff from 1.1.1.1

[gurika]

But this don`t work, I want block DESTINATION IP, I don`t want visitors access to that IP on port 80, how I can do that? If I good see this block visitor with IP 1.1.1.1!!???

Thanks.

[gurika]

I think this is what I need:
iptables -A INPUT -p tcp -d 2.2.2.2 --dport 80 -j REJECT

[gurika]

This iptables -A INPUT -p tcp -d 2.2.2.2 --dport 80 -j REJECT

work fine but only few minutes, something on my server RESET THIS and again allow access to this IP, what can do that? Why???

What can AUTO reset my iptables? cPanel?? This is MAIN/SHARED IP on my server...

[layer0]

Originally posted by gurika
This iptables -A INPUT -p tcp -d 2.2.2.2 --dport 80 -j REJECT

work fine but only few minutes, something on my server RESET THIS and again allow access to this IP, what can do that? Why???

What can AUTO reset my iptables? cPanel?? This is MAIN/SHARED IP on my server...

I'm not aware of something like that done at short intervals. However, I do know of something that may clear out iptable's rules every 24 hours or so.

Thanks,

[likonar]

try to save you iptables rules such as:
iptables-save > /etc/sysconfig/iptables