Koozali.org: home of the SME Server

How to block range of IP addresses from SME

netdesignns

How to block range of IP addresses from SME
« on: June 13, 2006, 07:38:05 AM »
Is there a method of blocking a single or a range of IP addresses from attempting to access SME completely?

Offline Curly

  • ***
  • 114
  • +0/-0
How to block range of IP addresses from SME
« Reply #1 on: June 13, 2006, 07:27:37 PM »
You should add a rule to the firewall saying you want to ignore all traffic from that address (/sbin/iptables -I INPUT -s 111.222.111.123 -j DROP)

and then think of a way to make that stick when the machine reboots, for example by putting it in /etc/rc.d/rc.local.

Ranges are much like the single address, but the address looks different:

207.46.28.0/24 is an example, look here http://en.wikipedia.org/wiki/Netfilter for more details
.......................................

Offline Tib

  • *
  • 571
  • +0/-0
    • http://www.tibors.net
How to block range of IP addresses from SME
« Reply #2 on: June 14, 2006, 03:03:00 AM »
netdesignns

If your lazy like me then mabe you wnat to find and load on this rpm.

smeserver-ipblock_internet-tg-1.0-b2.noarch.rpm


Regards,

Tib