Problem: I have a czech BOT trying to break into my system.
I'm running an old version of Linux and need the format to block his IP.
Here's what the ip6table entries look like:
root% cat ip6tables
# Firewall configuration written by system-config-firewall
# Manual customization of this file is not recommended.
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A INPUT -p ipv6-icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -i eth+ -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 53 -j ACCEPT
-A INPUT -m state --state NEW -m udp -p udp --dport 53 -j ACCEPT
...
-A INPUT -m state --state NEW -m udp -p udp --dport 7100 -j ACCEPT
-A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
-A FORWARD -p ipv6-icmp -j ACCEPT
-A FORWARD -i lo -j ACCEPT
-A FORWARD -i eth+ -j ACCEPT
-A INPUT -j REJECT --reject-with icmp6-adm-prohibited
-A FORWARD -j REJECT --reject-with icmp6-adm-prohibited
COMMIT
I've tried putting in:
-A INPUT -s 109.105.54.56 -i DROP (which when typed on the console works - but when I put it in the ip6tables file the file doesn't load properly).
I've looked all over the internet and can't find a version of my ip6tables to figure out what I need to do.
regards,
tony