Peter wrote:
Try something like (off the top of my head, untested):iptables -I INPUT -s %s -j DROP; echo 'iptables -D INPUT -s %s -j DROP' | at now + 1 hours
Thats pretty neat, I have never heard of the at command. Surely if you were being hammered by multiple IP's, that would leave loads of at processes hanging around?
On another note I dont think you should let interchange have clear access to iptables for fairly obvious reasons, you can configure sudo to allow access to a command with limited arguments (i.e something like iptables -I INPUT -s (\d*.\d*.\d*.\d*)/32 -j DROP; to limit access) so the interchange user can't do things like iptables -I INPUT -s 0.0.0.0/0 -j DROP. An even better solution would be to use something like grsecurity, which I am planning to tinker with in the near future.
_______________________________________________ interchange-users mailing list suppressed http://www.icdevgroup.org/mailman/listinfo/interchange-users
Mail converted by mhonarc 2.6.15
This archive provided courtesy of JSW4.NET, Internet Hosting Services for Small Business.