Linux Netfilter discussions
 help / color / mirror / Atom feed
From: "Joey" <Joey@Web56.net>
To: IPTables <netfilter@vger.kernel.org>
Subject: whitelist ?
Date: Tue, 28 Oct 2008 13:37:05 -0400	[thread overview]
Message-ID: <000601c93923$cb748720$625d9560$@net> (raw)

 

Hello all,

 

If I am blocking a block of IP's lets say

 

84.17.64.0/19

 

Using:

 

And I find that I need to allow:

84.17.64.23

 

 

 

My rules look like this:

:SMTP_TRAFFIC - [0:0]

-A INPUT -p tcp --dport 25 -m state --state NEW -j SMTP_TRAFFIC

 

Then

-A LOG_LIST_NAME -j LOG --log-prefix "SPAM-BLOCK-CIDR- LIST_NAME "

-A LOG_ LIST_NAME -j DROP

 

 

Would I put something like:

:WHITE_LIST

-A INPUT -p tcp --dport 25 -m state --state NEW -j WHITE_LIST

-A LOG_ WHITELIST -j ACCEPT

 

Then 

-A WHITE_LIST -s 84.17.64.23 -j LOG_WHITE_LIST

 

This is not my strong suite.

 

Thanks!

 



                 reply	other threads:[~2008-10-28 17:37 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to='000601c93923$cb748720$625d9560$@net' \
    --to=joey@web56.net \
    --cc=netfilter@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox