#Trying to block a specific IP address.

34 messages · Page 1 of 1 (latest)

regal roost
#

I tried using firewalld to block the IP address, but they still have a connection through docker and its flooding my logs up with junk. Is there something I am missing?

mental moss
strange egretBOT
regal roost
#

I am using a dedicated server, so this guide isn't that helpful.

torn zealot
#

You using docker / pterodactyl?

regal roost
#

yes

primal yacht
#

iptables -I DOCKER-USER -s 127.0.0.0/0 -j DROP
where 127.0.0.0/0 can be the entire range or just a single ip

#

(if using iptables, I'd need to lookup the command for firewalld)

#

(dont forget to make it persistent aswell)

regal roost
#

IP address still shows up in logs

#

i wonder if docker has its own behavior

primal yacht
#

uh, that's odd

#

since it worked for me lol

regal roost
#

I am using CentOS Stream 8 :/

primal yacht
#

ahh

#

I dont think that uses iptables

regal roost
#

its bundled with firewalld, but I do not think it functions correctly

primal yacht
#

hm, lemme find the command for firewalld

torn zealot
#

iptables -I DOCKER-USER -s 45.128.232.206 -j DROP
iptables -I INPUT -s 45.128.232.206 -j DROP

#

That'll 100% work for any docker based services

#

(that 45. IP is one of the IPs involved with spamming peoples consoles)

primal yacht
#

centos has iptables?

torn zealot
#

Yes

#

firewalld is just a nice frontend for iptables

primal yacht
#

oh, TIL

regal roost
#

added them in, so would i need to reload anything or is it automatically applied?

torn zealot
#

You can use rich rules to interact directly with iptables

#

and in theory no

#

that should kick in straight away

regal roost
#

i am gonna restart the minecraft server to see if it worked

#

hard to tell with console log spam

primal yacht
#

Yeah it's annoying, not harmful luckily

regal roost
#

just unneeded log spam and wasted space

#

yeah, the log spam stopped