'Iptables' is a user-space utility program that allows a system administrator to configure the tables provided by the Linux kernel firewall. It is basically used to set up, maintain, and inspect the tables of IP packet filter rules in the Linux kernel. Several different tables may be defined. Each table contains a number of built-in chains and may also contain user-defined chains.


With the help of ShieldSquare's Feed-Based Protection, you can block bad IPs using Iptables. Once you subscribe to ShieldSquare Bot IP Feed, you can either blacklist the bad IPs manually or by writing automated scripts using the below iptables utility commands.


Whenever the operation 'ADD' comes in ShieldSquare Feed, execute the below command to blacklist the IP.

 

iptables -A INPUT -s <xxx.xxx.xxx.xxx> -j DROP

 

Whenever the operation 'DEL' comes in ShieldSquare Feed, execute the below command to release the IP from blacklisting.


iptables -D INPUT -s <xxx.xxx.xxx.xxx> -j DROP


For more details, reach out to support@shieldsquare.com.