<div dir="ltr">iptables is not enough. You will need to maintain a list of banned ips. failtoban - <a href="https://www.fail2ban.org/wiki/index.php/Main_Page">https://www.fail2ban.org/wiki/index.php/Main_Page</a> is a good start. <div>A hardware firewall will only add to confusion. See <a href="https://github.com/trick77/ipset-blacklist">https://github.com/trick77/ipset-blacklist</a></div><div><br></div><div>But ... backup first and always. I backup to a second server with rsync daily. I inspect logins and new files daily. </div></div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, May 18, 2018 at 11:29 AM, bobby <span dir="ltr"><<a href="mailto:architectofthefuture@gmail.com" target="_blank">architectofthefuture@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">I was on the ubuntu forums, and a user had posted this:<br><br>Always have both a hardware AND software firewall.<br>Don't trust other computers on the same LAN implicitly. One of them may have been hacked and is being used to attack all other systems<br><div><br></div><div>I had some clarification questions on these:</div><div>
1. I am running iptables on my server. Is this not enough? Is a hardware device recommended as well? <br>
2. How is this acted upon? How do I protect myself internally, from these types of attacks?
<br></div></div>
<br>-- <br>
ubuntu-hardened mailing list<br>
<a href="mailto:ubuntu-hardened@lists.ubuntu.com">ubuntu-hardened@lists.ubuntu.<wbr>com</a><br>
<a href="https://lists.ubuntu.com/mailman/listinfo/ubuntu-hardened" rel="noreferrer" target="_blank">https://lists.ubuntu.com/<wbr>mailman/listinfo/ubuntu-<wbr>hardened</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><br>Kindness Works!<br>Jim Tarvid<br>12897A Grays Pointe Road, Fairfax, Va 22033-2143<br><span>38.87782, -77.39270<br></span>703-657-0099 Condo<br>703-624-5289 Cell<br></div><div><span>703-594-7297</span> Google voice<br></div><div>202-753-0025 Tablet<br></div><div dir="ltr"><a href="http://ls.net" target="_blank">http://ls.net</a></div></div></div></div></div></div></div></div></div></div>
</div>