Using iptables to block ftp access

Is it possible to use a command similar to this:

Code:

sudo iptables -A INPUT -i eth0 -p tcp --dport 22 -m state --state NEW -m recent --set --name SSH
sudo iptables -A INPUT -i eth0 -p tcp --dport 22 -m state --state NEW -m recent --update --seconds 60 --hitcount 8 --rttl --name SSH -j DROP

to block ftp access in the same way?

It would look something like this:

Code:

sudo iptables -A INPUT -i eth0 -p tcp --dports 20,21 -m state --state NEW -m recent --set --name FTP
sudo iptables -A INPUT -i eth0 -p tcp --dports 20,21 -m state --state NEW -m recent --update --seconds 60 --hitcount 8 --rttl --name FTP -j DROP

 

Basically it *should* work.

 

=) Thanks Falko

 

or you could use /etc/hosts.deny
and get the stats from the system log file.

 

Would that automatically block them?

 

Yes, that's right.