Can I white list one IP so it do not get DROP_HOSTILE?

[jon]

@casabenedetti

so can I put this script in iptables?

using the /etc/sysconfig/firewall.local script is the way to add things to iptables.

Block of 69.42.215.252 (freedns.afraid)

If it is of interest, I post here the configuration I set up on “/etc/sysconfig/firewall.local”. I am waiting for suggestions for any corrections and/or improvements to the code. #!/bin/sh # Used for private firewall rules # See how we were called. case "$1" in start) ## add your 'start' rules here iptables -C HOSTILE_DROP -p tcp -d 69.42.215.252 --dport 443 -j ACCEPT if [ $? -eq 1 ] then iptables -I HOSTILE_DROP -p tcp -d 69.42.215.252 --dport 443 -j ACCEPT fi iptables …

also see:

firewall.local - The IPFire Documentation

@casabenedetti

Is it the “improvement” of what I wrote in the other post?

I think it is similar - It is up to you if it is an improvement!

FYI - this is not a permanent fix! Either Josh needs to change things on his side (write him a note!) or you and I and @raffe need to change DYNDNS vendors