Can someone Provide me with range of chinesse ips so i can ban?

[rena_chan]

so if they use proxy?
will they still can try to access?

 

[James]

so if they use proxy?
will they still can try to access?

If you are talking about the ListenAddress I mentioned, no.

Only the specified IP can access the SSH with the ListenAddress set, no other IP can.

 

[talence]

so if they use proxy?
will they still can try to access?

yes, if you are telling about the HTTP. To access ssh no http proxy is allowed. http proxies will not work on ssh. To make ssh lame you need to use ssh tunnel same laming technology which is used on http.

But as James Said, if you are using ListenAddress then one IP will be allowed to access the shell on your server. It only can be done by the admin if he is using only one IP to access his ssh as well as most of the server works.

And to ban the whole range you made some wrongs:

[root@localhost apf]# iptables -I INPUT -p tcp -s 218.0.0.0 -j DROP
[root@localhost apf]# iptables -I INPUT -p udp -s 218.0.0.0 -j DROP
[root@localhost apf]# iptables -I INPUT -p udp -s 211.0.0.0 -j DROP
[root@localhost apf]# iptables -I INPUT -p tcp -s 211.0.0.0 -j DROP

It should not be like that. It should be like this:

iptables -A INPUT -s 218.0.0.0/8 -j DROP
iptables -A INPUT -s 211.0.0.0/8 -j DROP

Changing the IP will ban with the whole range like 211.0.0.0 - 255.0.0.0

You also can do this

218.1.1.0/24 (To Ban Upto 255.255.255.0)
218.1.0.0/16 (To Ban Upto 255.255.0.0)

Regards

 

[A1Owner]

Well regarding listen address i do not have single ip as it changes from location to location (no i dont sit at home all the time). So how to put and allow more than 1 ip to listen to .

And thanks talence i know what /24 and /16 mean. But what does /8 mean?

 

[ingfina]

But what does /8 mean?

255.0.0.0

 

[talence]

255.0.0.0

But what does /8 mean?

Corrent what ingfina said, and i also informed that in my reply. its like this:

if you use 218.0.0.0/8 then it will ban all the IPs upto 218.0.0.0 - 255.0.0.0

It will contain 16777216 IPs.

You also can use 218.0.0/7
It mean like this:
218.0.0.0/7 = 218.0.0.0 through 219.255.255.255

This will contain 33554432 IPs.

Regards