Re: Filter ips

["Gáspár Lajos" <swifty@freemail.hu>]

nunezj@ucbcba.edu.bo írta:
> Hi everyone
>
>        I have some problems when I want to filter some ips in  my network
>
>  I put this rules in the my script:
>
>  iptables -A INPUT -s 192.168.0.5/32 -d 0/0 -p tcp --dport 20,21 -j DROP
>
>  but it doesn't work. The same I put in the Output rules but it doen't
> work....
>
>   How can I make this filter?
>
> regards,
>
>              Jorge Enrique
>   
Maybe this line will help you:

iptables -A INPUT -s 192.168.0.5 -p tcp -m multiports --dports 20,21 -j DROP

This only filters the incoming traffic
To filter the forward traffic use this:

iptables -A FORWARD -s 192.168.0.5 -p tcp -m multiports --dports 20,21 
-j DROP


iptables -vnL              is you friend !!! :)
iptables -t nat -vnL       also !!! :)

Swifty