Deny access via iptables to entire subnet

Question

linux

Good evening, I ran into a DDoS issue with one of my projects.

Dosyat the whole subnet, and blocking each IP range individually is too long, time is running out.

Actually the question is how to limit access to my project to an entire subnet at once using iptables?

Answer 1

iptables -I INPUT -m iprange --src-range 192.168.0.8-192.168.0.25 -j DROP

Answer 2

I would also look towards ipset if you need to block several subnets