I am not very knowledgeable with ip filters and have a question.
My 5.0.6 box is locked down except it has the ssh port open for remote logins. I keep getting ssh login requests from an IP address of 211.138.138.26 which as far as I can tell by looking up the IP address info is from Asia.
I thought that the following entry into my ipf.conf file would block these requests from this IP range.
block in log quick on any from 211.0.0.0/8 to any
Does this look right or do I have something wrong? There is no reason to allow an incoming ssh request from any IP address in the 211.0.0.0 range as this is not even in the united states ????
Thanks,
Rob
My 5.0.6 box is locked down except it has the ssh port open for remote logins. I keep getting ssh login requests from an IP address of 211.138.138.26 which as far as I can tell by looking up the IP address info is from Asia.
I thought that the following entry into my ipf.conf file would block these requests from this IP range.
block in log quick on any from 211.0.0.0/8 to any
Does this look right or do I have something wrong? There is no reason to allow an incoming ssh request from any IP address in the 211.0.0.0 range as this is not even in the united states ????
Thanks,
Rob