Error when drop ips with script on iptables.

Discussion in 'Programming/Scripts' started by r4faga, Apr 6, 2013.

  1. r4faga

    r4faga New Member

    Hello...

    I make a simple script to drop multiples ips on iptables to be banned. But cant drop it now.

    Mark this error: iptables: Memory allocation problem.

    I have 8 gigas ram, so is imposible it's a problem of lack of memory.

    I have centos+ispconfig (i used The Perfect Server - CentOS 6.3 x86_64 (Apache2, Courier, ISPConfig 3)

    This is my script: for i in $(cat /etc/sysconfig/ip.ls)
    do
    iptables -I INPUT -s $i -j DROP
    iptables -I INPUT -s $i -j LOG --log-prefix "Packet Input DROP:"
    done

    ip.ls is list of range of ips. like this:

    2.60.0.0/14
    2.92.0.0/14
    5.1.48.0/21
    5.2.32.0/19
    5.3.0.0/16
    5.8.0.0/17
    5.8.160.0/20
    5.8.176.0/21
    5.8.192.0/19
    5.8.224.0/20
    5.11.64.0/20
    5.16.0.0/14
    5.23.48.0/21
    5.23.96.0/21

    but when I run the script, records some ips and seconds later the error:

    iptables: Memory allocation problem.
    iptables: Memory allocation problem.
    iptables: Memory allocation problem.
    iptables: Memory allocation problem.
    iptables: Memory allocation problem.
    iptables: Memory allocation problem.
    iptables: Memory allocation problem.

    and i have to cancel the script.

    Any idea?

    Tanks...
     
  2. victorbell

    victorbell New Member

    I will have to study this for some time as I have no idea about this. But I will soon find out a solution and let you know.
     
  3. florian030

    florian030 Member HowtoForge Supporter ISPConfig Developer

    If you would add a subnet to iptables, you have to masquerade it.
    iptables -I INPUT -s "$i" -j DROP
     

Share This Page