[BlueOnyx:25681] login attempts after IP added to firewall reject list
Ed Qualls
eduard.qualls at gmail.com
Thu Nov 10 19:13:36 -05 2022
As root, I added IP addresses that the firewall should reject immediately.
Getting status showed that they had been added to the reject list.
However, they are still showing up in BlueOnyx with attempts to login as
root.
For example, I used
firewall-cmd --permanent --add-rich-rule="rule family='ipv4' source
address='61.177.172.191' reject"
on one IP address, but just today, someone/something on that IP tried to
login almost 800 times.
(That IP is registered in Lianyungang city, Jiangsu province, Communist
China.)
Was that not the correct command to use to force rejection of that IP
address in AlmaLinux/BlueOnyx?
--
Eduard Qualls
*www.eduardqualls.com <http://www.eduardqualls.com>*
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.blueonyx.it/pipermail/blueonyx/attachments/20221110/2d47f9b1/attachment.html>
More information about the Blueonyx
mailing list