Configuring IP Tables

Hi all,

I would like to configure iptables to drop all SSH connections. I have
the following rules set up:

root@lastochka max # iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
DROP tcp -- anywhere anywhere tcp
spt:ssh
DROP udp -- anywhere anywhere udp
spt:ssh

Chain FORWARD (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

However, launching an SSH program on another computer and attempting
to connect lets me through.

Can someone tell me what I'm doing wrong?
Thanks in advance,
Max


Max

On 27 Jul 2004 20:46:58 -0700
(E-Mail Removed) (Max) wrote:

> Hi all,
>
> I would like to configure iptables to drop all SSH connections. I have
> the following rules set up:
>
> root@lastochka max # iptables -L
> Chain INPUT (policy ACCEPT)
> target prot opt source destination
> DROP tcp -- anywhere anywhere tcp
> spt:ssh
> DROP udp -- anywhere anywhere udp
> spt:ssh
>
> Chain FORWARD (policy ACCEPT)
> target prot opt source destination
>
> Chain OUTPUT (policy ACCEPT)
> target prot opt source destination
>
> However, launching an SSH program on another computer and attempting
> to connect lets me through.
>
> Can someone tell me what I'm doing wrong?
> Thanks in advance,
> Max
you have to change --sport 22 to --dport 22

then it will work

Greets
Chris