View Single Post
  #3  
Old 26th October 2010, 22:17
mini14 mini14 is offline
Member
 
Join Date: Oct 2010
Posts: 66
Thanks: 2
Thanked 3 Times in 3 Posts
Default

You can permanently block the offending IP numbers and even the class C that they are part of if you want to. Edit the file "pre-chain-split.sh" that's located in /etc/Bastille/firewall.d

Add lines like this to it...

iptables -A INPUT -s xx.xxx.xx.0/24 -j DROP
(blocks the class C)
iptables -A INPUT -s xx.xxx.xx.x -j DROP
(blocks the individual IP)

Then restart Bastille with /etc/init.d/bastille-firewall restart
Reply With Quote