Thread: Cant block udp (quake) ports with iptables

hi

i've started getting traffic through server port 27960 , 27962 (quake ports)
heading destination address of 83.170.84.81. these using udp.
originate different ip addresses

have tried block host , ports on udp protocol using iptables, ever not dropped.

here's line iptables -l

drop udp -- anywhere offendingaddress.co.uk udp dpt:27960
drop udp -- anywhere offendingaddress.co.uk udp dpt:27962

, have them first in list

here's iptables commands used:

iptables -a input -d ip.add.re.ss -p udp --dport 27960 -j drop
iptables -a input -d ip.add.re.ss -p udp --dport 27962 -j drop

i've tried different combinations still cant block them

have tried blocking of source hosts, doesn't work either

ideas anybody?

john

if don't care destination, if don't mind blocking ports all, drop -d option:
iptables -a input -p udp --dport 27960 -j drop

also, working iptables on server receiving traffic, or on server firewall/gateway in between? if destination server different machine, traffic might forwarded regardless of these input rules because input traffic destined server. might wanna try:
iptables -a forward -p udp --dport 27960 -j drop

should block forwarding traffic too.

Forum The Ubuntu Forum Community Ubuntu Specialised Support Security [ubuntu] Cant block udp (quake) ports with iptables

Ubuntu