Finetuning Bastille firewall

[bolero]

I would like to restrict ssh access to a few IP address ranges. Is this possible without shutting the ISPConfig/Bastille firewall (off and using your complete own iptables rules))? e.g. is there a Bastille config file where I could add additional iptables directives so that these get added to the ones done by ISPConfig and not overwritten if changes are made in ISPConfig?

[till]

Have a look here:

http://www.howtoforge.com/forums/showthread.php?t=6209

[bolero]

looks quite promising, many thanks!