iptables help

Samuel Kidman samkidman at gmail.com
Wed Oct 6 01:14:36 UTC 2010


On Wed, Oct 6, 2010 at 5:34 AM, mike lan <lan.mike88 at gmail.com> wrote:

> hello
> still learnin iptables.
> I need to setup an iptables script for an untrusted lan network , the
> firewall should only connect to two or three ip address on the lan and drop
> any other ip address on the lan .
>
> thanks
>
>
> --
> users mailing list
> users at lists.fedoraproject.org
> To unsubscribe or change subscription options:
> https://admin.fedoraproject.org/mailman/listinfo/users
> Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
>
> I think this would do it:

iptables -t filter --append INPUT --destination <ip address 1>,<ip address
2>,<ip address 3> -j ACCEPT
iptables -t filter --append INPUT -j DROP

so if the packet is going to one of the three trusted computers it gets
accepted, otherwise dropped.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.fedoraproject.org/pipermail/users/attachments/20101006/4fa5c59b/attachment.html 


More information about the users mailing list