Linux Netfilter discussions
 help / color / mirror / Atom feed
From: Martijn Lievaart <m@rtij.nl>
To: Keller Nicolas <nicolas.keller@slb.de>
Cc: netfilter@lists.netfilter.org
Subject: Re: Multiple Source Addresses
Date: Tue, 15 Apr 2003 19:27:41 +0200	[thread overview]
Message-ID: <3E9C410D.4080809@rtij.nl> (raw)
In-Reply-To: <22FCCF057850DB48B98178E1811374830DA6D9@slra07.slb.de>

Keller Nicolas wrote:

>Hi!
>
>I want to log every packet that *doesn't* come from IP1 and IP2 (because
>these two hosts should be the only one that communicate with the
>Firewall). Up to now I couldn't figure out a way to do this, as it is
>NOT possible to include multiple source addresses in one line, like
>this:
>
>iptables -A INPUT -s !192.168.43.1 !192.168.43.2 -j LOG
>
>Anyone can show me a way to get this to work?
>  
>

Simple.

iptables -N LOGSOME
iptables -A INPUT -j LOGSOME
iptables -A LOGSOME -s 192.168.43.1 -j RETURN
iptables -A LOGSOME -s 192.168.43.2 -j RETURN
iptables -A LOGSOME -j LOG

HTH,
M4




  reply	other threads:[~2003-04-15 17:27 UTC|newest]

Thread overview: 6+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2003-04-15 16:28 Multiple Source Addresses Keller Nicolas
2003-04-15 17:27 ` Martijn Lievaart [this message]
2003-04-15 17:39 ` Brad Morgan
2003-04-15 18:10 ` Aaron Berg
2003-04-28 15:33   ` unsubsrcibe Linux
  -- strict thread matches above, loose matches on Subject: below --
2003-04-15 18:07 Multiple Source Addresses Daniel Chemko

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=3E9C410D.4080809@rtij.nl \
    --to=m@rtij.nl \
    --cc=netfilter@lists.netfilter.org \
    --cc=nicolas.keller@slb.de \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox