Dynamic Domain name security ssh to prevent malicious landing

First go to peanut shells or other dynamic domain names to apply for a free domain name.

1, the server first write the rules to prevent direct access to the SSH

-A INPUT DROP

-A Input-p TCP--dport 80-j ACCEPT

-A Input-p TCP--dport 22-s finy.hhks.cc-j ACCEPT

2, the IP of the domain to point to your current office IP

3,cron task five minutes to refresh the IP of the domain name once

#!/bin/bash

Iptable=/etc/init.d/iptables

Restart () {

$iptables restart

}

Restart

Vi/etc/cron

*/5 * * * */usr/iptables_scripts/iptables.sh

4, is not the correct domain name can be resolved

Ping finy.hhks.cc

Look at your actual IP consistent

So in addition to your domain IP can access your server SSH other is not, to deal with profiteering cracking is very useful.

5 minutes to refresh the IP record of the dynamic domain name once.