Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #222834

Re: ufw and blocking certain IP in and out

From songbird <songbird@anthive.com>
Newsgroups linux.debian.user
Subject Re: ufw and blocking certain IP in and out
Date 2020-05-28 22:40 +0200
Message-ID <AbxtL-8p7-3@gated-at.bofh.it> (permalink)
References <AbpPz-3Te-1@gated-at.bofh.it> <Abskp-5s5-7@gated-at.bofh.it> <Abt6O-5I1-7@gated-at.bofh.it> <AbuYV-6Py-3@gated-at.bofh.it>
Organization the little wild kingdom

Show all headers | View raw


Reco wrote:
...
> This rule is wrong, assuming that you're trying to prevent your browser
> to connect to 1.2.3.4:
>
> -A ufw-user-output -s 1.2.3.4/32 -j REJECT --reject-with icmp-port-unreachable
>
> "-s" means "source", and it'll only work if you have ip 1.2.3.4.

  i don't have 1.2.3.4 and i have no idea how 1.2.3.4 is getting
involved, it isn't a cloud service or hosting site just some
completely unrelated site and i have no idea why it is being
dragged into any of this unless there is some infection or 
redirection going on which i have no knowledge.  i know i didn't
put it in there, so it is either produced by the website 
generator code, some other library involved or the hosting 
service.  i can't find it in any of the code i have so i don't
think i'm doing this specifically, but i don't know how to
narrow it down either.


> What you should use is:
>
> -A ufw-user-output -d 1.2.3.4/32 -j REJECT --reject-with icmp-port-unreachable
>
> "-d" means destination.

  i'd be ok with just dropping it all.


> I don't use ufw, so I cannot comment on how to specify "source" and
> "destination" there.

  ok, thanks for commenting.  not sure what i'll do yet.


  songbird

Back to linux.debian.user | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

ufw and blocking certain IP in and out songbird <songbird@anthive.com> - 2020-05-28 14:30 +0200
  Re: ufw and blocking certain IP in and out Reco <recoverym4n@enotuniq.net> - 2020-05-28 17:10 +0200
    Re: ufw and blocking certain IP in and out songbird <songbird@anthive.com> - 2020-05-28 18:00 +0200
      Re: ufw and blocking certain IP in and out Reco <recoverym4n@enotuniq.net> - 2020-05-28 20:00 +0200
        Re: ufw and blocking certain IP in and out songbird <songbird@anthive.com> - 2020-05-28 22:40 +0200
  Re: ufw and blocking certain IP in and out Marina Garcia Rubio <magaru@misena.edu.co> - 2020-05-31 06:50 +0200

csiph-web