complement of an IP address range rejected by iptables in F14
Tim
ignored_mailbox at yahoo.com.au
Fri Jan 14 01:04:01 UTC 2011
On Thu, 2011-01-13 at 17:30 -0700, dave perry wrote:
> Using intrapositioned negation (`--option ! this`) is deprecated in
> favor of extrapositioned (`! --option this`).
>
> Am I interpreting this change correctly to think that the following
> line,
>
> /sbin/iptables -A FORWARD ! -s 192.168.1.0/24 -j DROP
>
> will drop all packet not sourced from the LAN with addresses
> 192.168.1.*
> where * is any number from 1 to 255?
I'd make a special test rule, and test it... Then I'd know.
--
[tim at localhost ~]$ uname -r
2.6.27.25-78.2.56.fc9.i686
Don't send private replies to my address, the mailbox is ignored. I
read messages from the public lists.
More information about the users
mailing list