complement of an IP address range rejected by iptables in F14

[Jorge Fábregas]

On 01/13/2011 08:30 PM, dave perry wrote:
> Am I interpreting this change correctly to think that the following line,
> 
> /sbin/iptables -A FORWARD ! -s 192.168.1.0/24 -j DROP
> 
> will drop all packet not sourced from the LAN with addresses 192.168.1.* 
> where * is any number from 1 to 255?

Yes, you are correct.

--
Jorge