I have a TLS site Apache which uses Basic Authentication to protect resources.I'm trying to setup an iptables rule to prevent brute force attacks on port 443, so I've added the following iptables rules in a bash script.$IPTABLES -N SSL-Brute-Force$IPTABLES -A INPUT -m tcp -p tcp --dport 443 -j SSL-Brute-Force$IPTABLES -A SSL-Brute-Force -m state --state NEW -m recent --set --name SSL --rsource$IPTABLES -A SSL-Brute-Force -m state --state NEW -m recent --update --seconds 600 --hitcount 5 --name SSL --rsource -j LOG --log-prefix [SSL Brute Force] $IPTABLES -A SSL-Brute-Force -m state --state NEW -m recent --update --seconds 600 --hitcount 5 --name SSL --rsource -j DROP$IPTABLES -A SSL-Brute-Force -j ACCEPTNow I can't access my site at all, and I can't see every packet to port 443 being dropped in my messages file.Did I get these rules right?
Using iptables to stop brute force attacks on a Apache https site
iptables;apache httpd;ssl