We are getting dictionary attacks to our SQL server, So I wanted to block some of the IP's using shorewall blacklist. I mentioned the IP in /etc/shorewall/blacklist as
#ADDRESS/SUBNET PROTOCOL PORT
Some IP
did not work, So I tried again like below but again it's not working
#ADDRESS/SUBNET PROTOCOL PORT
Some IP - -
I have this configuration BLACKLIST_DISPOSITION=DROP, and I am using shorewall version 4.4.6
Is there anything I have to check or add?