Re: Temporary blocking a host

Tom Eastep
Tue, 11 Dec 2007 19:06:36 -0000

Tom Eastep wrote:
> Mirek Sobczak wrote:
>> Hi,
>> I''ve debian running Shorewall, with two interfaces.
>> I want sometimes to block access of one host from local network to
internet.
>> I''ve use command:
>> shorewall drop 10.1.1.222
>>
>> after this that host can''t make new connection, but existing
connections
>> are still active.
>>
>> How to brake theese active connections?
>> Maybe I should use iptables directly?
>
> Use ''cutter''.

Or if you have small blacklists, you can also set BLACKLISTNEWONLY=No in
shorewall.conf.

-Tom
--
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key