<HTML>
<HEAD>
<META content="text/html; charset=iso-8859-1" http-equiv=Content-Type>
<META content="OPENWEBMAIL" name=GENERATOR>
</HEAD>
<BODY bgColor=#ffffff>
How about that - you're right Gerald.
<br />
<br />It appears that just like IP Tables assumes world if you don't put in a source or destination (like -s 0/0 or -d 0/0) - IP Tables will also assume the first rule if you don't give it a specific line to insert at. I tried your input, and it did insert it at rule 1.
<br />
<br />I have to admit - I'd never tried the insert switch (-I) without giving it a specific destination, or line number where to insert the rule. So I'd never noticed that it would accept the inert without a specific line - and put it in as line #1.
<br />
<br />The INPUT is the default chain, and merely calls the "acctin" chain. It appears that BlueOnyx does this to use the acctin chain for accounting (traffic level monitoring for the active monitor pages). So technically, either chain will work for inbound traffic rules. Just watch what order the rules are in - as the first rule that matches the traffic is what's done.
<br />
<br />Sorry about that Gerald. Like I said - I'd never tested IP Tables without being specific about where I wanted the rule inserted.
<br />
<br />
<br />Chuck
<br />
<br />
<br /><font size="2"><b>---------- Original Message
-----------</b>
<br />
From: Gerald Waugh <gwaugh@frontstreetnetworks.com>
<br />
To: BlueOnyx General Mailing List <blueonyx@mail.blueonyx.it>
<br />
Sent: Sun, 26 May 2013 06:52:05 -0500
<br />
Subject: [BlueOnyx:13108] Re: dovecot not registering with failed logins?
<br />
<br />> On 05/25/2013 10:11 PM, Chuck
Tetlow
wrote:
<br />>
<blockquote type="cite" cite="mid:20130526030156.M16923@tetlow.net">
<b>That IP Tables
</b><b>
</b><b>rule won't work.</b> You're missing the rule number,
and
have the wrong rule name. And the "-d 0/0" isn't really needed
-
it means " whole world" and is assumed if not given
<br />>
</blockquote>
/sbin/iptables -I INPUT -s 1.2.3.4 -d 0/0 -j DROP
<br />>
<br />>
not looking for trouble, but to say a rule 'won't' work, when
it
does is a little troubling.
<br />>
the rule does work on my servers, as it immediately blocks an
attack
on the server
<br />>
as seen by an immediate cessation of the attack.
<br />>
<br />>
Gerald
<br /><b>------- End of Original Message
-------</b>
<br />
</font>
</BODY>
</HTML>