Добавил несколько правил (посмотрел свой /var/log/auth.log):
vir@trooper:~$ sudo iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
DROP all -- static-153-150-92-77.internetsahibi.net anywhere
DROP all -- r058.red.fastwebserver.de anywhere
DROP all -- 116.255.244.40 anywhere
DROP all -- 219.144.16.138 anywhere
DROP all -- 116.253.189.130 anywhere
DROP all -- 115.236.99.195 anywhere
DROP all -- server-178.211.50.115.as42926.net anywhere
DROP all -- 111.73.45.183 anywhere
DROP all -- mail.kezbanim.com anywhere
DROP all -- 121.8.154.39 anywhere
DROP all -- 61.132.4.85 anywhere
DROP all -- 210-71-211-83.HINET-IP.hinet.net anywhere
DROP all -- viptalon.ru anywhere
DROP all -- 1.2.3.4 anywhere
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination Пытаюсь сохранить правила, но они почему-то ложаться в цепочку OUTPUT. Разве они должны быть не в INPUT'e?
vir@trooper:~$ sudo iptables-save
# Generated by iptables-save v1.4.12 on Thu Jan 31 13:47:04 2013
*filter
:INPUT ACCEPT [9508:583428]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [10016:2561503]
-A INPUT -s 77.92.150.153/32 -j DROP
-A INPUT -s 217.79.190.58/32 -j DROP
-A INPUT -s 116.255.244.40/32 -j DROP
-A INPUT -s 219.144.16.138/32 -j DROP
-A INPUT -s 116.253.189.130/32 -j DROP
-A INPUT -s 115.236.99.195/32 -j DROP
-A INPUT -s 178.211.50.115/32 -j DROP
-A INPUT -s 111.73.45.183/32 -j DROP
-A INPUT -s 188.132.216.35/32 -j DROP
-A INPUT -s 121.8.154.39/32 -j DROP
-A INPUT -s 61.132.4.85/32 -j DROP
-A INPUT -s 210.71.211.83/32 -j DROP
-A INPUT -s 178.77.125.63/32 -j DROP
-A INPUT -s 1.2.3.4/32 -j DROP
COMMIT
# Completed on Thu Jan 31 13:47:04 2013
