[BlueOnyx:25681] login attempts after IP added to firewall reject list

Ed Qualls eduard.qualls at gmail.com
Thu Nov 10 19:13:36 -05 2022


As root, I added IP addresses that the firewall should reject immediately.
Getting status showed that they had been added to the reject list.
However, they are still showing up in BlueOnyx with attempts to login as
root.

For example, I used

firewall-cmd --permanent --add-rich-rule="rule family='ipv4' source
address='61.177.172.191' reject"
on one IP address, but just today, someone/something on that IP tried to
login almost 800 times.

(That IP is registered in Lianyungang city, Jiangsu province, Communist
China.)


Was that not the correct command to use to force rejection of that IP
address in AlmaLinux/BlueOnyx?

-- 
Eduard Qualls
*www.eduardqualls.com <http://www.eduardqualls.com>*
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.blueonyx.it/pipermail/blueonyx/attachments/20221110/2d47f9b1/attachment.html>


More information about the Blueonyx mailing list