From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: <gentoo-user+bounces-169083-garchives=archives.gentoo.org@lists.gentoo.org> Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id 9548A1384B4 for <garchives@archives.gentoo.org>; Tue, 29 Dec 2015 13:28:32 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 07ACD21C057; Tue, 29 Dec 2015 13:27:52 +0000 (UTC) Received: from acheron.yagibdah.de (acheron.yagibdah.de [185.55.75.245]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 6374721C007 for <gentoo-user@lists.gentoo.org>; Tue, 29 Dec 2015 13:27:50 +0000 (UTC) Received: from br-dmz-ip.yagibdah.de ([192.168.1.1] helo=heimdali.yagibdah.de) by acheron.yagibdah.de with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.85) (envelope-from <lee@yagibdah.de>) id 1aDuJY-0006p2-NM for gentoo-user@lists.gentoo.org; Tue, 29 Dec 2015 14:27:48 +0100 Received: from lee by heimdali.yagibdah.de with local (Exim 4.85) (envelope-from <lee@heimdali.yagibdah.de>) id 1aDuJY-0002SR-Kj for gentoo-user@lists.gentoo.org; Tue, 29 Dec 2015 14:27:48 +0100 From: lee <lee@yagibdah.de> To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] IPTABLES In-Reply-To: <20151222224512.b877f56012f7f7e014a2a02a@web.de> (siefke's message of "Tue, 22 Dec 2015 22:45:12 +0100") Date: Tue, 29 Dec 2015 14:09:57 +0100 Organization: my virtual residence Message-ID: <87poxpo0yi.fsf@heimdali.yagibdah.de> References: <20151222224512.b877f56012f7f7e014a2a02a@web.de> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.5 (gnu/linux) Mail-Followup-To: gentoo-user@lists.gentoo.org Precedence: bulk List-Post: <mailto:gentoo-user@lists.gentoo.org> List-Help: <mailto:gentoo-user+help@lists.gentoo.org> List-Unsubscribe: <mailto:gentoo-user+unsubscribe@lists.gentoo.org> List-Subscribe: <mailto:gentoo-user+subscribe@lists.gentoo.org> List-Id: Gentoo Linux mail <gentoo-user.gentoo.org> X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Content-Type: text/plain X-Archives-Salt: b85b1bd9-a07e-4d2a-b8e2-8864ef2e92a0 X-Archives-Hash: f38d2f8912112b0c0b100653a82d0b41 "siefke_listen@web.de" <siefke_listen@web.de> writes: > Hello, > > i try to run iptables, block bad ips and close the system. > > I want run firewall which block all INPUT, only ALLOW services i defined. > Ipset want to use to block spam ips, make it sure awesome as ever set rules > manuell. After reading a good iptables tutorial, you may want to take a look at shorewall and it's documentation. If you're referring to IP addresses from which you receive emails that are spam, I'd recommend getting familiar with exim and perhaps spamassassin. For extreme cases, you might want to use something like fail2ban.