Re: "blocking" hosts

[Iain Mac Donald <iainjunk@freeuk.com>]

On Tue, 2004-05-18 at 14:59, David Cunningham wrote:
> Not really.  This is helpful but will only block access to those services
> that are compiled against tcp wrappers.  To block all access you can use
> iptables or add a blocked route to your routing table.  For example:
> 
> route add -net 194.73.242.0/24 reject         # (this will block all access
> from the class C network 194.73.242.0)
> route add -host 194.73.242.132 reject        # (this will block all access
> from the IP address 194.73.242.132)

You might also want to look at the package Shorewall which I find very useful
for configuring my firewall. Furthermore, it creates scripts to start all the 
firewall stuff automatically on boot.

Regards,
Iain.