Secure sshd

[icesoul]

how i secure ssh ? In firewall rules settings i waz add a rule to Deny for all IP, but do not know what to write in field ' Denied IP addresses '

[fly]

Hello,

Needs to set ip addresses which denied to field "Denied IP addresses". In field "Any
Source address" needs to set allowed network.

[icesoul]

how to deny all IP and alow just 1 ?
what to write on 'Denied IP addresses' field to deny all IP

[fly]

how to deny all IP and alow just 1 ?

In this case ISPmanager's Firewall settings should be:
Action - Deny
Protocol - Any
IP address - 1 address that needs to be blocked.

[icesoul]

Originally Posted by fly

In this case ISPmanager's Firewall settings should be:
Action - Deny
Protocol - Any
IP address - 1 address that needs to be blocked.

but how to block all ? not just 1 IP

[fly]

Sorry, correct variant:

Action: Allow for
Protocol: Any
Source address (network): 0.0.0.0/0
Allowed IP addresses: allowed ip address

[icesoul]

i tink this firewall is not working
After this setting anyone can connect on ssh

[fly]

please show iptables -L

[icesoul]

Chain INPUT (policy ACCEPT)
target     prot opt source               destination

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

Chain ispmgr_allow_ip (0 references)
target     prot opt source               destination

Chain ispmgr_allow_sub (0 references)
target     prot opt source               destination

Chain ispmgr_deny_ip (0 references)
target     prot opt source               destination

Chain ispmgr_deny_sub (0 references)
target     prot opt source               destination
DROP       tcp  --  anywhere             anywhere             tcp dpt:ssh

[fly]

Where is no references for ispmanager's chain. Probably, you executed iptables -F what is the reason of problem.

It needs to include ispmanager's chain to INPUT Chain for solving the problem