Script iptables SSHlimit.sh - Revision history

T1t0 at 06:21, 7 November 2020

2020-11-07T06:21:06Z

← Older revision		Revision as of 06:21, 7 November 2020
Line 3:		Line 3:
	#		#
	# Firewall rules to limit ssh incoming connections		# Firewall rules to limit ssh incoming connections
			# limit ssh incoming connection to 3 for minutes from a same ip

	PATH=/sbin:/bin:/usr/sbin:/usr/bin;		PATH=/sbin:/bin:/usr/sbin:/usr/bin;
Line 10:		Line 11:
	case "$1" in		case "$1" in
	start)		start)
	iptables -I INPUT -p tcp --dport 22 -m state --state NEW -m recent --set --name SSH_LIST;		iptables-legacy -I INPUT -p tcp --dport 22 -m state --state NEW -m recent --set --name SSH_LIST;
	iptables -I INPUT -p tcp --dport 22 -m state --state NEW -m recent --update --seconds 60 --hitcount 2 --name SSH_LIST -j DROP;		iptables-legacy -I INPUT -p tcp --dport 22 -m state --state NEW -m recent --update --seconds 60 --hitcount 3 --name SSH_LIST -j DROP;
	;;		;;
	stop)		stop)
	iptables -D INPUT -p tcp --dport 22 -m state --state NEW -m recent --update --seconds 60 --hitcount 2 --name SSH_LIST -j DROP;		iptables-legacy -D INPUT -p tcp --dport 22 -m state --state NEW -m recent --update --seconds 60 --hitcount 3 --name SSH_LIST -j DROP;
	iptables -D INPUT -p tcp --dport 22 -m state --state NEW -m recent --set --name SSH_LIST;		iptables-legacy -D INPUT -p tcp --dport 22 -m state --state NEW -m recent --set --name SSH_LIST;
	;;		;;
	status)		status)
	iptables -L -n --line-numbers;		iptables-legacy -L -n --line-numbers;
	;;		;;
	restart\|reload\|force-reload)		restart\|reload\|force-reload)
Line 33:		Line 34:

	# End		# End

	</pre>		</pre>

T1t0 at 05:40, 7 November 2020

2020-11-07T05:40:46Z

← Older revision		Revision as of 05:40, 7 November 2020
Line 2:		Line 2:
	#!/bin/sh		#!/bin/sh
	#		#
	# ~~Network firewall config~~		# Firewall rules to limit ssh incoming connections

	PATH=/sbin:/bin:/usr/sbin:/usr/bin;		PATH=/sbin:/bin:/usr/sbin:/usr/bin;

T1t0 at 20:50, 19 October 2020

2020-10-19T20:50:59Z

← Older revision		Revision as of 20:50, 19 October 2020
Line 35:		Line 35:

	</pre>		</pre>

			[[Category:script]]
			[[Category:network]]
			[[Category:firewall]]
			[[Category:iptables]]
			[[Category:ssh]]

T1t0 at 20:49, 19 October 2020

2020-10-19T20:49:12Z

← Older revision		Revision as of 20:49, 19 October 2020
Line 10:		Line 10:
	case "$1" in		case "$1" in
	start)		start)
	iptables -I INPUT 1 -p tcp --dport 22 -m state --state NEW -m recent --~~update --seconds 60 --hitcount 2~~ --name SSH_LIST ~~-j DROP~~;		iptables -I INPUT -p tcp --dport 22 -m state --state NEW -m recent --set --name SSH_LIST;
	iptables -I INPUT 2 -p tcp --dport 22 -m state --state NEW -m recent --~~set~~ --name SSH_LIST;		iptables -I INPUT -p tcp --dport 22 -m state --state NEW -m recent --update --seconds 60 --hitcount 2 --name SSH_LIST -j DROP;
	;;		;;
	stop)		stop)
			iptables -D INPUT -p tcp --dport 22 -m state --state NEW -m recent --update --seconds 60 --hitcount 2 --name SSH_LIST -j DROP;
	iptables -D INPUT -p tcp --dport 22 -m state --state NEW -m recent --set --name SSH_LIST;		iptables -D INPUT -p tcp --dport 22 -m state --state NEW -m recent --set --name SSH_LIST;
	~~iptables -D INPUT -p tcp --dport 22 -m state --state NEW -m recent --update --seconds 60 --hitcount 2 --name SSH_LIST -j DROP;~~
	;;		;;
	status)		status)
	iptables -L -n -v;		iptables -L -n --line-numbers;
	;;		;;
	restart\|reload\|force-reload)		restart\|reload\|force-reload)

imported>T1t0 at 03:42, 8 December 2011

2011-12-08T03:42:58Z

← Older revision		Revision as of 03:42, 8 December 2011
Line 25:		Line 25:
	;;		;;
	*)		*)
	echo "Usage: $0 {start\|stop}";		echo "Usage: $0 {start\|stop\|status}";
	RET_CODE=1;		RET_CODE=1;
	;;		;;

imported>T1t0 at 03:42, 8 December 2011

2011-12-08T03:42:37Z

← Older revision		Revision as of 03:42, 8 December 2011
Line 17:		Line 17:
	iptables -D INPUT -p tcp --dport 22 -m state --state NEW -m recent --update --seconds 60 --hitcount 2 --name SSH_LIST -j DROP;		iptables -D INPUT -p tcp --dport 22 -m state --state NEW -m recent --update --seconds 60 --hitcount 2 --name SSH_LIST -j DROP;
	;;		;;
	status\|restart\|reload\|force-reload)		status)
			iptables -L -n -v;
			;;
			restart\|reload\|force-reload)
	echo "Error: argument '$1' not supported" >&2;		echo "Error: argument '$1' not supported" >&2;
	RET_CODE=1;		RET_CODE=1;

imported>T1t0: Created page with "

 #!/bin/sh # # Network firewall config  PATH=/sbin:/bin:/usr/sbin:/usr/bin;  RET_CODE=0  case "$1" in     start)         iptables -I INPUT 1 -p tcp --dport 22 -m state --sta..."

2011-12-01T03:17:34Z

Created page with "<pre> #!/bin/sh # # Network firewall config PATH=/sbin:/bin:/usr/sbin:/usr/bin; RET_CODE=0 case "$1" in start) iptables -I INPUT 1 -p tcp --dport 22 -m state --sta..."

New page

<pre>
#!/bin/sh
#
# Network firewall config

PATH=/sbin:/bin:/usr/sbin:/usr/bin;

RET_CODE=0

case "$1" in
start)
iptables -I INPUT 1 -p tcp --dport 22 -m state --state NEW -m recent --update --seconds 60 --hitcount 2 --name SSH_LIST -j DROP;
iptables -I INPUT 2 -p tcp --dport 22 -m state --state NEW -m recent --set --name SSH_LIST;
;;
stop)
iptables -D INPUT -p tcp --dport 22 -m state --state NEW -m recent --set --name SSH_LIST;
iptables -D INPUT -p tcp --dport 22 -m state --state NEW -m recent --update --seconds 60 --hitcount 2 --name SSH_LIST -j DROP;
;;
status|restart|reload|force-reload)
echo "Error: argument '$1' not supported" >&2;
RET_CODE=1;
;;
*)
echo "Usage: $0 {start|stop}";
RET_CODE=1;
;;
esac;

exit "${RET_CODE}";

# End

</pre>