PDA

View Full Version : How to deny a range ip addresses on ssh?



IceHosting
02-14-2007, 07:56 AM
Hello,

We have a lot of hacking on our ssh port from *.ipt.aol.com users. So we want to block all ips with domain *.ipt.aol.com. How could we do this?

Thanks

Roland

jlandes
02-14-2007, 04:09 PM
You could probably do it with a firewall, such as APF.

quackweb
02-14-2007, 11:03 PM
/etc/hosts.deny, Google is your friend :)

andyreed
02-15-2007, 06:07 AM
We have a lot of hacking on our ssh port from *.ipt.aol.com users. So we want to block all ips with domain *.ipt.aol.com. How could we do this?You can change Shell Port from the default 22 to something else. To restrict connection to SSH, you can do what quckweb suggested. For more info on hosts.deny / hosts.allow go to: http://www.itc.virginia.edu/unixsys/sec/hosts.html

IceHosting
02-15-2007, 06:28 AM
Thanks,

Domain is hopefully now blocked :)