Comment Re:NMAP (Score 1) 205
this scales much better:
$IPTABLES -I INPUT -m set --match-set ipbl src -j DROP
$IPTABLES -I FORWARD -m set --match-set ipbl src -j DROP
$IPTABLES -I FORWARD -m set --match-set ipbl dst -j DROP
$IPTABLES -I OUTPUT -m set --match-set ipbl dst -j DROP
add an ip to ipbl set:
ipset add ipbl ${IP}
don't forget to block all ipv6 traffic if you don't need ipv6:
${IP6TABLES} -I FORWARD -i eth0 -j DROP
${IP6TABLES} -I INPUT -i eth0 -j DROP
${IP6TABLES} -I FORWARD -o eth0 -j DROP
${IP6TABLES} -I OUTPUT -o eth0 -j DROP