From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Brad Morgan" Subject: RE: Multiple Source Addresses Date: Tue, 15 Apr 2003 11:39:53 -0600 Sender: netfilter-admin@lists.netfilter.org Message-ID: References: <22FCCF057850DB48B98178E1811374830DA6D9@slra07.slb.de> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <22FCCF057850DB48B98178E1811374830DA6D9@slra07.slb.de> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" To: Keller Nicolas , netfilter@lists.netfilter.org How about: iptables -N good-ips iptables -A good-ips -s 192.168.43.1 -j RETURN iptables -A good-ips -s 192.168.43.2 -j RETURN iptables -A good-ips -j LOG and add: iptables -A INPUT -j good-ips in the appropriate place. -----Original Message----- From: netfilter-admin@lists.netfilter.org [mailto:netfilter-admin@lists.netfilter.org]On Behalf Of Keller Nicolas Sent: Tuesday, April 15, 2003 10:29 AM To: netfilter@lists.netfilter.org Subject: Multiple Source Addresses Hi! I want to log every packet that *doesn't* come from IP1 and IP2 (because these two hosts should be the only one that communicate with the Firewall). Up to now I couldn't figure out a way to do this, as it is NOT possible to include multiple source addresses in one line, like this: iptables -A INPUT -s !192.168.43.1 !192.168.43.2 -j LOG Anyone can show me a way to get this to work? Thank you very much! Nicolas Keller