Linux Netfilter discussions
 help / color / mirror / Atom feed
From: Kim Jensen <kimj@dawn.dk>
To: seberino@spawar.navy.mil, Steve Mickeler <steve@warning.ca>
Cc: netfilter@lists.netfilter.org
Subject: Re: How filter IP address if it *changes* often?? (think dhcp)
Date: Fri, 28 Mar 2003 10:31:28 +0100	[thread overview]
Message-ID: <200303281031.29018.kimj@dawn.dk> (raw)
In-Reply-To: <20030327222617.A19911@spawar.navy.mil>

On Friday 28 March 2003 07:26, seberino@spawar.navy.mil wrote:
> Steve
>
> Thanks for the email.  Let me rerephrase my question.
> Perhaps I wasn't clear....
>
> How can you have a rule on your INPUT chain that
> only allows your local box's IP address if "local box IP address" can
> change without notice due to your DSL ISP's decision?
>
> Chris
>
Hi Chris,

If you are having one interface for all incoming traffic and one for outgoing 
traffic, then you can simply filter it by looking at the interface like:

iptables -A INPUT -i LOCAL_IF -j ACCEPT

You can also set up your rule so it allows traffic from the IP range you have 
internally:

iptables -A INPUT -s LOCAL_NET -j ACCEPT

The rules are a little primitive, but I hope you get the idea.

/Kim



  parent reply	other threads:[~2003-03-28  9:31 UTC|newest]

Thread overview: 8+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2003-03-28  4:00 How filter IP address if it *changes* often?? (think dhcp) seberino
2001-03-28 16:51 ` Rowan Reid
2003-03-28  4:16 ` Steve Mickeler
2003-03-28  6:26   ` seberino
2003-03-28  8:15     ` Michael K
2003-03-28  9:31     ` Kim Jensen [this message]
2003-03-28 15:11     ` Joel Newkirk
  -- strict thread matches above, loose matches on Subject: below --
2003-03-28 19:06 Tomasz Korycki

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=200303281031.29018.kimj@dawn.dk \
    --to=kimj@dawn.dk \
    --cc=netfilter@lists.netfilter.org \
    --cc=seberino@spawar.navy.mil \
    --cc=steve@warning.ca \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox