How to block my ip address?

[victornova]

How to block my ip address so nobody has access to my dialer from another ip other than mine.?

[iboam]

A friend of mine give me a solution, it's working with me so im sharing with the world.

This script will open all ports to "TRUSTED SOURCES" and will block all ports to "UNTRUSTED SOURCES"

vim firewall.sh

i

#!/bin/bash
/sbin/SuSEfirewall2 off

#CLEAR ALL IPTABLE RULES
iptables -F
iptables -X

# DROP ALL INBOUND TRAFFIC
iptables -P INPUT DROP

# DROP ALL FORWARDING TRAFFIC
iptables -P FORWARD DROP

# ALLOW OUTBOUND TRAFFIC
iptables -P OUTPUT ACCEPT

# ALLOW SYSTEM TRAFFIC
iptables -A INPUT -i lo -j ACCEPT
iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT

# ALLOW TRAFFIC FROM TRUSTED SOURCES
# HOME
iptables -A INPUT -s XXX.XXX.XXX.XXX -j ACCEPT


# TRUNKS
iptables -A INPUT -s XXX.XXX.XXX.XXX -j ACCEPT #TRUNK NAME

# DROP ALL INBOUND TRAFFIC
iptables -A INPUT -p all -j DROP

:wq


***************************************************

vim /etc/rc.d/boot.local
i
/root/firewall.sh
:wq


chmod 777 firewall.sh
chmod +x firewall.sh
./firewall.sh


iptables -vnL

[victornova]

A friend of mine give me a solution, it's working with me so im sharing with the world.

This script will open all ports to "TRUSTED SOURCES" and will block all ports to "UNTRUSTED SOURCES"

vim firewall.sh

i

#!/bin/bash
/sbin/SuSEfirewall2 off

#CLEAR ALL IPTABLE RULES
iptables -F
iptables -X

# DROP ALL INBOUND TRAFFIC
iptables -P INPUT DROP

# DROP ALL FORWARDING TRAFFIC
iptables -P FORWARD DROP

# ALLOW OUTBOUND TRAFFIC
iptables -P OUTPUT ACCEPT

# ALLOW SYSTEM TRAFFIC
iptables -A INPUT -i lo -j ACCEPT
iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT

# ALLOW TRAFFIC FROM TRUSTED SOURCES
# HOME
iptables -A INPUT -s XXX.XXX.XXX.XXX -j ACCEPT


# TRUNKS
iptables -A INPUT -s XXX.XXX.XXX.XXX -j ACCEPT #TRUNK NAME

# DROP ALL INBOUND TRAFFIC
iptables -A INPUT -p all -j DROP

:wq


***************************************************

vim /etc/rc.d/boot.local
i
/root/firewall.sh
:wq


chmod 777 firewall.sh
chmod +x firewall.sh
./firewall.sh


iptables -vnL

Thank you very much brother, you helped me a lot

[williamconley]

http://viciwiki.com/index.php/DGG

Dynamic Good Guys Whitelist Firewall for Vicidial

It is not actually necessary to *install* DGG, as the instructions show first how to whitelist lockdown your system. Then installing DGG is merely to allow an easy web page to add/remove authorized (whitelist) IPs plus an additional page to allow a login from a special link (so you can check the real time screen from Starbucks easily, for instance).

[forwardsource]

http://viciwiki.com/index.php/DGG

Above mentioned site link is not working. Please advise us the script.

[williamconley]

http://viciwiki.com/index.php/DGG

Above mentioned site link is not working. Please advise us the script.

Um ... we were moving it (and a bunch of other webs) to a new server and somewhere in the new process it got left behind.

Back online.