I am using ipset in conjunction with iptables to create a list of IPs I want to block. I did this:

ipset -N blocking iphash
ipset -A blocking
// and repeated this line for all IPs I want to add to "blocking" list

now I have to add this rule to iptables

if I do this

iptables -A INPUT -m set --set blocking src -j DROP

the IPs will be blocked for everything SSH, FTP, etc. I want just to block them from using my email system dovecot, exim.

how do I do that?

iptables -A INPUT -p tcp --dport 25 -m set --set blocking src -j DROP
iptables -A INPUT -p tcp --dport 143 -m set --set blocking src -j DROP

... or whatever ports you're using.

  • simply PERFECT!!!! thanks, you are a genius! – SpaceDog Feb 17 '13 at 23:19

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.