Displaying 4 results from an estimated 4 matches for "20geoip".
2015 Dec 29
1
Firewall trouble?
...ing, integrating iptables + GeoIP is really easy.
> And handy for ssh access/blocks.
> I only allow ssh acces on my server from the netherlands with a rule like:
>
> -A ufw-before-input -m state --state NEW -m geoip ! --src-cc NL -m tcp -p tcp --dport 22 -m comment --comment 'SSH%20Geoip' -j DROP
>
> If you want some extra info on that, just mail me, no problem.
>
>
> Greetz,
>
> Louis
>
>
>
>
>> -----Oorspronkelijk bericht-----
>> Van: samba [mailto:samba-bounces at lists.samba.org] Namens James
>> Verzonden: maandag...
2015 Dec 29
1
Firewall trouble?
...ing, integrating iptables + GeoIP is really easy.
> And handy for ssh access/blocks.
> I only allow ssh acces on my server from the netherlands with a rule like:
>
> -A ufw-before-input -m state --state NEW -m geoip ! --src-cc NL -m tcp -p tcp --dport 22 -m comment --comment 'SSH%20Geoip' -j DROP
>
> If you want some extra info on that, just mail me, no problem.
>
>
> Greetz,
>
> Louis
>
>
>
>
>> -----Oorspronkelijk bericht-----
>> Van: samba [mailto:samba-bounces at lists.samba.org] Namens James
>> Verzonden: maandag...
2015 Dec 28
9
Firewall trouble?
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
I recently tried adding a firewall to my Samba 4 server using the port
information I found on the wiki. Below is a dump of the resulting rules.
root at dc01:~# iptables -S
- -P INPUT DROP
- -P FORWARD DROP
- -P OUTPUT ACCEPT
- -A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
- -A INPUT -p tcp -m tcp --dport 22 -m state --state NEW -m
2015 Dec 29
0
Firewall trouble?
...ted.
And a handy thing, integrating iptables + GeoIP is really easy.
And handy for ssh access/blocks.
I only allow ssh acces on my server from the netherlands with a rule like:
-A ufw-before-input -m state --state NEW -m geoip ! --src-cc NL -m tcp -p tcp --dport 22 -m comment --comment 'SSH%20Geoip' -j DROP
If you want some extra info on that, just mail me, no problem.
Greetz,
Louis
> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens James
> Verzonden: maandag 28 december 2015 17:27
> Aan: samba at lists.samba.org
> Ond...