IP addresses keep on attacking our server. 192.168.0.115 and 192.168.0.125. Block them with tcp wrappers for all services?

January 1, 2018 1.3k views
Security Ubuntu 16.04
khushdeep438
By:
khushdeep438

1 accept all related and established states
2 accept all packets from the icmp protocol (ping etc.)
3 accept everything coming to the loopback interface (lo)
4 accept ssh traffic – port 22 on the tcp protocol
5 accept http traffic – port 80 on the tcp protocol
6 accept https traffic – port 443 on the tcp protocol
7 drop all other packets.

Log In to Comment
2 Answers
lampreyOne January 2, 2018
An Introduction To DigitalOcean Cloud Firewalls
by Melissa Anderson
DigitalOcean Cloud Firewalls, available in all regions at no charge, provide a network-based, stateful firewall service for your DigitalOcean Droplets. They block all traffic that isn't expressly permitted by a rule. They're designed to be easy to configure, quick to apply, and automation-friendly. In this guide, we'll explore how to create and manage DigitalOcean Cloud Firewalls.
Reply
Woet January 2, 2018

Those IPs are in private IP space, so I doubt it. How did you determine they are “attacking” you?

Reply
Have another answer? Share your knowledge.

Related Questions