block + kill connections
rob0 at gmx.co.uk
Sun Jan 8 23:18:01 CET 2006
On Sunday 2006-January-08 16:04, Robert Nichols wrote:
> > iptables -I INPUT -s 18.104.22.168 -j DROP
> That will prevent communication by blocking any further incoming
> packets, but won't do anything to tear down the connection. See
Actually it would drop anything with a source address of 22.214.171.124 which
happens to hit the filter INPUT chain, regardless of protocol or state.
Perhaps the issue is as I suggested, the packets are hitting FORWARD,
or simply that a blocked connection has not yet timed out of conntrack
or netstat listings.
mail to this address is discarded unless "/dev/rob0"
or "not-spam" is in Subject: header
More information about the netfilter