Negating IP in csf.deny

chenull · Post by **chenull** » 17 Jan 2007, 20:32

Hi,

I tried to blocked any incoming packet with destination port 22, with source IP is not 202.0.0.0/8. i've tried to insert:
tcp:in:d=22:s=!202.0.0.0/8

but it doesnt work

or i just missconfigured it ?

If it's not been supported yet, could you add this kind of notation (negating an address) ?

TIA

great work!

Post by **chirpy** » 18 Jan 2007, 22:14

chenull wrote:but it doesnt work or i just missconfigured it ?

It won't work - there's no such functionality in the advanced port blocking.

spellinn · Post by **spellinn** » 12 Mar 2007, 12:13

But that doesn't mean what you are trying to do can't be done right?

I would of thought the same thing could be done by using two rules, one to block all incoming port 22 from *, then allowing it from your IP?

Cheers,

Neil