* blocking all connections
@ 2007-04-06 13:16 dhottinger
2007-04-06 16:13 ` Martijn Lievaart
0 siblings, 1 reply; 4+ messages in thread
From: dhottinger @ 2007-04-06 13:16 UTC (permalink / raw)
To: netfilter@lists.netfilter.org
What is the best rule for blocking all connections to an ip address.
For example, lets say I want to block all connections to the domain
google.com.
--
Dwayne Hottinger
Network Administrator
Harrisonburg City Public Schools
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: blocking all connections
2007-04-06 13:16 blocking all connections dhottinger
@ 2007-04-06 16:13 ` Martijn Lievaart
2007-04-06 19:43 ` dhottinger
0 siblings, 1 reply; 4+ messages in thread
From: Martijn Lievaart @ 2007-04-06 16:13 UTC (permalink / raw)
To: dhottinger; +Cc: netfilter@lists.netfilter.org
dhottinger@harrisonburg.k12.va.us wrote:
> What is the best rule for blocking all connections to an ip address.
> For example, lets say I want to block all connections to the domain
> google.com.
The domain google.com is not an ip address. If you want to block all web
access to google, use a transparent cache. Otherwise I see no way to do
this (reliably).
M4
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: blocking all connections
2007-04-06 16:13 ` Martijn Lievaart
@ 2007-04-06 19:43 ` dhottinger
2007-04-06 21:15 ` Martijn Lievaart
0 siblings, 1 reply; 4+ messages in thread
From: dhottinger @ 2007-04-06 19:43 UTC (permalink / raw)
To: netfilter
Quoting Martijn Lievaart <m@rtij.nl>:
> dhottinger@harrisonburg.k12.va.us wrote:
>> What is the best rule for blocking all connections to an ip
>> address. For example, lets say I want to block all connections to
>> the domain google.com.
>
> The domain google.com is not an ip address. If you want to block all
> web access to google, use a transparent cache. Otherwise I see no way
> to do this (reliably).
>
> M4
Google.com was just an example. Lets say I want to block all
connections to and from 194.67.57.26.
--
Dwayne Hottinger
Network Administrator
Harrisonburg City Public Schools
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: blocking all connections
2007-04-06 19:43 ` dhottinger
@ 2007-04-06 21:15 ` Martijn Lievaart
0 siblings, 0 replies; 4+ messages in thread
From: Martijn Lievaart @ 2007-04-06 21:15 UTC (permalink / raw)
To: dhottinger; +Cc: netfilter
dhottinger@harrisonburg.k12.va.us wrote:
> Quoting Martijn Lievaart <m@rtij.nl>:
>
>> dhottinger@harrisonburg.k12.va.us wrote:
>>> What is the best rule for blocking all connections to an ip
>>> address. For example, lets say I want to block all connections to
>>> the domain google.com.
>>
>> The domain google.com is not an ip address. If you want to block all
>> web access to google, use a transparent cache. Otherwise I see no way
>> to do this (reliably).
>>
>> M4
>
> Google.com was just an example. Lets say I want to block all
> connections to and from 194.67.57.26.
>
-I INPUT -j BLOCK
-I FORWARD -j BLOCK
-I OUTPUT -j BLOCK
-N BLOCK
-A BLOCK -s 194.67.57.26 -j DROP
-A BLOCK -d 194.67.57.26 -j DROP
HTH,
M4
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2007-04-06 21:15 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2007-04-06 13:16 blocking all connections dhottinger
2007-04-06 16:13 ` Martijn Lievaart
2007-04-06 19:43 ` dhottinger
2007-04-06 21:15 ` Martijn Lievaart
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox