136 reputation
7
bio website
location United States
age 27
visits member for 1 year, 5 months
seen Oct 4 '13 at 18:03

I make things.


Oct
4
awarded  Revival
Oct
4
comment Can't add large number of rules to iptables
Thanks @derobert, I did mention that in my answer.
Feb
28
awarded  Critic
Feb
28
awarded  Supporter
Jan
29
comment Can't add large number of rules to iptables
Does that work on CentOS 5.x without recompiling the kernel?
Jan
29
awarded  Teacher
Jan
29
awarded  Scholar
Jan
29
accepted Can't add large number of rules to iptables
Jan
29
answered Can't add large number of rules to iptables
Nov
5
awarded  Editor
Nov
5
revised Can't add large number of rules to iptables
added 484 characters in body
Nov
5
comment Can't add large number of rules to iptables
That's what I did. Like I said, it was a very simple bash script; I had ~7300 lines that looked just like the example I gave. All the iptables commands after ~400 give the same "unknown error". I ran service iptables save before executing the script, so it was simple to revert using service iptables restart. If it's a bug in CentOS' kernel config, I'm not sure there's much I can do about that given that it's a virtual dedicated server (can't do kernel modifications, afaik).
Nov
5
comment Can't add large number of rules to iptables
I use sshguard (www.sshguard.net) to block attacks dynamically. I looked into fail2ban and denyhosts, but those would be redundant with sshguard running. That said, the main issue is that I want to block these IP ranges preemptively, because of crawlers and scrapers in those regions.
Nov
5
awarded  Student
Nov
5
asked Can't add large number of rules to iptables