I attempted to block a potentially malicious IP address using iptables, but discovered that appending the new “drop” rule was ineffective due to a prior “allow” rule. This post describes steps to insert the rule at an appropriate place, and other iptables tips.