IP Tables

Regular Joined: Mar 14, 2005 Posts: 91

Has anyone ever used IP Tables to ban ip's at the kernel level (or however that actually works Smile

)? Has anyone ever heard of it? From what I understand alot of the linux firewalls are just interfaces to IP Tables.

I found a nice little shell script that downloads(from a few different folders on [ Only registered users can see links on this board! Get registered or login! ] all the IP blocks/ranges for a given country and generates rules to ban them using IP tables. But I'm kinda afraid to use it as I've never even messed with the IP tables. The script could probably changed to make rules for .htaccess with a little modification. Any thoughts? Or should I just stick to using .htaccess and sentinel?

Posted: Sat Jan 26, 2008 1:59 pm

If you have root access to your server, IP tables isn't a bad idea. It will protect the entire server from all connections, even those that don't go to the HTTP port 80.
Much more efficient than blocking through Apache's .htaccess