hosts.deny vs iptables

CodeHeads codeheads at gmail.com
Wed May 24 15:58:03 UTC 2006


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wed, 24 May 2006 10:34:23 -0500 Bruno Wolff III <bruno at wolff.to> wrote:

> On Wed, May 24, 2006 at 10:46:39 -0400,
>   CodeHeads <codeheads at gmail.com> wrote:
> > 
> > Ed,
> > Thank you, That what I was looking for to verify what I have learned so far.
> > 
> > Question on entering IP address in IPTables, say I want to add a range to
> > block the whole ip range of 10.0.0.0 (example of course)
> > Can I do this:
> > $iptables -A FORWARD -p tcp -s 10. -i eth0 -j DROP
> > OR
> > $iptables -A FORWARD -p tcp -s 10.* -i eth0 -j DROP
> 
> Either
> $iptables -A FORWARD -p tcp -s 10.0.0.0/8 -i eth0 -j DROP
> or
> $iptables -A FORWARD -p tcp -s 10.0.0.0/255.0.0.0 -i eth0 -j DROP
> will work.

Thank you Bruno.  Just wanted to verify about the wild cards.

Sorry for all the questions, IP's confuse me a bit. :) LOL
Say if I have a range of 222.96.0.0 - 222.122.255.255
Is there a calculator that will tell me the netmask??

Will
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)

iD8DBQFEdIKLfw3TK8jhZrsRAg9PAKDKEOBc+B6hV98Yk14O7pt55+YlJwCg4f1o
3HgXuIWAXRXipVlCR7AR4c0=
=zm19
-----END PGP SIGNATURE-----




More information about the users mailing list