Objective: I would like to be able to block an IP address from having any/all coections to my server ruing Ubuntu 16.04 and strictly iptables.
Background: I've read tutorials and troubleshooting articles, so I know how the implementation should work, but it's not. I'm starting fresh to troubleshoot, so I have flushed my entire iptables, uninstalled and purged ufw, erased all but the standard INPUT/OUTPUT/FORWARD chains, and am currently trying to block one of my other devices so I'm able to test realtime.
Problem/Observation: Despite my iptables seemingly being configured correctly, I am still able to coect to the server through the device with the IP in rule #1 on both SSH and other specific service ports.
sudo iptables -L -n -v --line-number (IP address redacted for security):
Code:
Chain INPUT (policy ACCEPT 205K packets, 27M bytes) num pkts bytes target prot opt in out source destination 1 0 0 DROP all -- * * 107.##.###.### 0.0.0.0/0 2 3757 318K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) num pkts bytes target prot opt in out source destination Chain OUTPUT (policy ACCEPT 287K packets, 177M bytes) num pkts bytes target prot opt in out source destination
Any suggestions or recommendations?
برچسب:
نویسنده: استخدام کار