SIMPLE way to block an IP

[littlevito]

I am looking for a SIMPLE way to block specific IP addresses from connecting to my computer. Preferably, it should have very little configuration, building, etc... I am using the Woody release of debian (so any packages i can apt-get would be easier). Thank you very much.

-David

[kam]

Use iptables.

[cwolf]

Use the /etc/host.deny and /etc/host.allow files

[littlevito]

I added the IPs to /etc/hosts.deny, but they can still connect. Is there a format that I don't understand? How would i implement ipchains or iptables in debian? Is there a SIMPLE way to do it for a linuxnewbie? Thanks for the earlier posts

[andycrofts]

http://www.netfilter.org/unreliable-guides/
(The bit about packet filtering = ipchains..)

[kam]

Originally posted by littlevito
I added the IPs to /etc/hosts.deny, but they can still connect. Is there a format that I don't understand? How would i implement ipchains or iptables in debian? Is there a SIMPLE way to do it for a linuxnewbie? Thanks for the earlier posts
The simple way is iptables, which is a firewall. This way the packets never even get into the computer.

[littlevito]

I know that i should use iptables, but I don't know how! Is there a how-to (or better yet, a really simple, quick way) to configure iptables to block only a few specific IP addresses?

[kam]

Here (http://linuxnewbie.org/nhf/Security/IPtables_Basics.html) is an NHF located right here at linuxnewbie.org. It should have enough info for you to block IPs. It wouldn't be a bad idea to read some more in-depth how-tos.