From: "Admin" <admin@romexpo.org>
To: netfilter@lists.netfilter.org
Subject: selective filter
Date: Wed, 3 Dec 2003 11:07:33 +0200 [thread overview]
Message-ID: <000f01c3b97c$e64a2d10$0501a8ac@Rares> (raw)
[-- Attachment #1: Type: text/plain, Size: 1338 bytes --]
Dear community,
I am new to this branch (Linux I mean) and as a new user it was my turn to install a new server.
I installed RedHat 8 on a system with 2 LAN cards.
The server works as a mailserver, apache, proxy and firewall.
The first 3 problems are solved. It work really fine.
The last daemon is the problem.
IPTABLES is installed but it is only with the default settings and with some settings made by the ISP.
The problem is that my bosses ask me to do some access list to restrict the access to some users on internet.
I "composed" some rules in squid.conf and everything works just fine until "a smart guy" discovered that if he doesn't
put the mark on "use proxy server" he have internet access.
In this case, I'm not verry sure, but I guess it is an iptables problem. I read something about this topic, but I didn't
find anything related to this specific problem.
Here are my data:
eth0: 193.2xx.xxx.xxx
eth1: 192.168.1.254
I want to restrict all users EXCEPT this 3 addresses: 192.168.1.100, 192.168.1.200, 192.168.1.21
How can I do that?
All that I found in all documentation that I read it was related to restricting all addresses.
Please, consider that I am a beginer and be a little more detailed on your help.
Do you have another ideea about solving this problem?
Thank you for your help!
Rares
[-- Attachment #2: Type: text/html, Size: 2767 bytes --]
next reply other threads:[~2003-12-03 9:07 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2003-12-03 9:07 Admin [this message]
2003-12-03 9:23 ` selective filter Antony Stone
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to='000f01c3b97c$e64a2d10$0501a8ac@Rares' \
--to=admin@romexpo.org \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox