From mboxrd@z Thu Jan 1 00:00:00 1970 From: Askar Ali Khan Subject: droping in forward/postrouting Date: Thu, 29 Jul 2004 15:19:10 +0500 Sender: netfilter-admin@lists.netfilter.org Message-ID: Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" To: netfilter hi all Im afraid i am again with a very simple/stupid question :), even though things not clear to me yet. im droping/blocking certain sites mainly gator sites on my router/firewall to LAN users, using slackware kernel 2.4.26. im doing this with the below rule $iptables -t nat -A POSTROUTING -s 0/0 -d 212.4.208.105 -j DROP This is working fine, however im kinda confuse whether this is the proper table/chain for accomplished this or may I do it with FORWARD chain like ... $iptables -A FORWARD -s 0/0 -d 212.4.208.105 -p tcp -j DROP which approach is recommended ? 1)nat/POSTROUTING OR 2) FORWARD thanks in advance regards Askar