Need help with entry to old-style ip6tables 2011 Linux

[tony j. podrasky]

Problem: I have a czech BOT trying to break into my system.

I'm running an old version of Linux and need the format to block his IP.

Here's what the ip6table entries look like:

root% cat ip6tables
# Firewall configuration written by system-config-firewall
# Manual customization of this file is not recommended.
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A INPUT -p ipv6-icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -i eth+ -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 53 -j ACCEPT
-A INPUT -m state --state NEW -m udp -p udp --dport 53 -j ACCEPT

...

-A INPUT -m state --state NEW -m udp -p udp --dport 7100 -j ACCEPT
-A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
-A FORWARD -p ipv6-icmp -j ACCEPT
-A FORWARD -i lo -j ACCEPT
-A FORWARD -i eth+ -j ACCEPT
-A INPUT -j REJECT --reject-with icmp6-adm-prohibited
-A FORWARD -j REJECT --reject-with icmp6-adm-prohibited
COMMIT

I've tried putting in:

-A INPUT -s 109.105.54.56 -i DROP (which when typed on the console works - but when I put it in the ip6tables file the file doesn't load properly).

I've looked all over the internet and can't find a version of my ip6tables to figure out what I need to do.

regards,

tony

[anshu_mishra16]

have you tried this ??

-A INPUT -s 109.105.54.56 -j DROP

/sbin/service iptables save