Quick and Dirty Host Block

SignalQ Sites:
NetAdminTools - Coprolite - SpotBridge - NAW
RoboCoop - AreWeDown - SolarPower - SysAdminTools
Xfig - Gold Loaf - GeekPapa - FixGMC - FixRambler

Categories:
·GNU/Linux
·Homebrew designs
·Perl
·Ruby
·Administration
·Backup/Recovery
·Bugs/Fixes
·Certification
·Database
·Email
·File/Print
·Hardware
·Information Grab Bag
·Interoperability
·GNU/Linux ABCs
·Monitoring
·Name Resolution
·Network Services
·Networking
·Remote Control
·Security
·Desktop
·Web
·BSD
·Solaris
·GIAGD
·ERP
·REALbasic
·All Categories

Quick and Dirty Host Block
Topic:Security Date: 2002-06-28
Printer Friendly:

<< < > >>

Subject

If you are being attacked or abused by a particular host, just enter the following command to deny all access to the host:

/sbin/route add -host <ip address> reject

Replace with the IP address of the host you want to block. The address will stay blocked until you bounce the interface. Alternatively, you could allow access by:

/sbin/route del -host <ip address> reject

For a more permanent rejection, of course, use your firewall. If you really want this to persist, add the command to rc.local or whatever your favorite is.

Do note that these options don't work with the XP/Windows 2000 route command. These options do work with Linux, and may work with other *nix systems. We have only tested with Linux.

People:
Places:
Things:
Times:

Please read our Terms of Use and our Privacy Policy
Microsoft, Windows, Windows XP, Windows 2003, Windows 2000, and NT are either trademarks or registered trademarks of Microsoft Corporation. NetAdminTools.com is not affiliated with Microsoft Corporation. Linux is a registered trademark of Linus Torvalds, and refers to the Linux kernel. The operating system of most distributions that contain the Linux kernel is GNU/Linux. All logos and trademarks in this site are property of their respective owner. Copyright 1997-2010 NetAdminTools.com