Creating a Saved Script With One Command Line to Block a Source IP Address

You can create a saved script to block a source IP address using a single line in Stellar Cyber:

  1. Log in to Stellar Cyber.

  2. Click System | Administration | Saved Scripts. The Script Template page appears.

  3. Click Create to add a new script. The Add Script Template screen appears.

  4. Enter the Name. Each script must have a unique name. This field does not support multibyte characters. You cannot edit the name after you submit. We entered Block Source IP Address.

  5. Choose a Tenant Name. We chose Root Tenant. You cannot edit the tenant after you submit.

  6. In the Script Body, enter:

    sudo iptables -I INPUT -s {{_source.srcip}} -p tcp -j DROP

  7. Click Submit. The script is saved and added to the table.