Preventing Listening on a specific IP

adam-pca

Verified User
Joined
May 4, 2004
Messages
21
Hi,

I was wondering if it is possible to prevent something from listening on the server main IP.

The reason being, I offer IRCd hosting and a few people have been adding the server main IP as the IP to listen on, which causes quite a few problems.

I appreciate any advice, thanks in advance.

Thanks,
Adam
 
What OS are you using?

You can do it with firewalling.

iptables for linux makes it easy.

Jeff
 
I am running CentOS 4.1. Could you point me in the right direction of how I would go about doing this? Thanks.

Adam
 
Do you use a firewall? If not, look for both KISS and for APF (search these forums); they've both been discussed many times.

Jeff
 
Hi,

I currently have APF installed, but from what I understand blocking the port in that blocks it from all IP addresses. Whereas I only want to block it on the server main IP.

Adam
 
I'm sure it can be done but I don't have time to study the details. Perhaps someone else (perhaps even you) will find the answer and let us all know :) .

Jeff
 
I'll cirtainly have a look into it, and if I do find the solution I'll post it here for all to use.

Adam
 
Listen port is usually per application... e.g., apache listens on ports as specified in the the config file(s). What application do you want to not listen on the primary IP? That option is probably available in the application configuration.
 
ballyn,

his clients are adding the application. So he'll have to firewall.

Jeff
 
Right...

With apf you'll set the EN_VNET setting to 1 which will enable per ip rules. Then you'll set up filtering on the primary IP in the virtual net file.
 
Back
Top