So this should be a simple issue, but for whatever reason I can't figure it out.
Here are my current rules:
Chain INPUT (policy ACCEPT)
target prot opt source destination
block all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
Chain FORWARD (policy ACCEPT)
target prot opt source destination
block all -- anywhere anywhere
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
block all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
Chain block (3 references)
target prot opt source destination
DROP all -- hit-nxdomain.opendns.com anywhere
I'm trying to block the "hit-nxdomain.opendns.com" location (dummy location). When I put in a real IP address can I can use from another location. If I try to hit my server from that location it still connects just fine. How can I get it to drop all requests from that IP address?
I'm using a chain because I will be dynamically modifying the blocked ip address(es) using a script, so I need to be able to clear out just the block chain without breaking the INPUT chain and add in new addresses. Can you show me what I'm doing wrong with it the way it currently is? As I said, the "hit-nxdomain.opendns.com" is just a dummy name. But if I have a valid IP there it's not blocking it.