Limit access to one subnet?

Limit access to one subnet?

[Jason Luka]

I'm trying to figure out how to allow only 141.225.x.x to access port 8080
on a server.  It's a proxy server and obviously I don't want anyone outside
of campus to be able to access it.

Re: Limit access to one subnet?

[Edmundo Carmona]

on the server:

iptables -A INPUT -s 141.225/16 -p tcp -dport 8080 -j ACCEPT
iptables -P INPUT DROP

Use with care.

On 9/15/05, Jason Luka <jluka@geshp.com> wrote:
> I'm trying to figure out how to allow only 141.225.x.x to access port 8080
> on a server.  It's a proxy server and obviously I don't want anyone outside
> of campus to be able to access it.
> 
> 
>

Re: Limit access to one subnet?

[Sai Kiran]

hi,

don't forget 

iptables -I INPUT -i lo -j ACCEPT

> 
> iptables -A INPUT -s 141.225/16 -p tcp -dport 8080 -j ACCEPT
> iptables -P INPUT DROP

Re: Limit access to one subnet?

[Edmundo Carmona]

That's what I meant when I said to use with care. He has to figure out
the "exact" way the firewall has to be set. If he only used those two
rules I wrote before... He'll have jumped into a deep pond of S&/T...
so to speak. :-)

On 9/16/05, Sai Kiran <saikiranrgda@gmail.com> wrote:
> hi,
> 
> don't forget
> 
> iptables -I INPUT -i lo -j ACCEPT
> 
> >
> > iptables -A INPUT -s 141.225/16 -p tcp -dport 8080 -j ACCEPT
> > iptables -P INPUT DROP
>

Re: Limit access to one subnet?

[Edmundo Carmona]

Hey... but that's the thing about the firewall... you can always open
the ssh port on the LAN side of your box... so it's not available on
internet... and so you don'r have to be really in front of that box...
and at the same time protect it from outside people.

On 9/16/05, Jason Luka <jluka@geshp.com> wrote:
> Yeah, I got it working right.  I just needed the help because if I screwed
> it up, I'd actually have to put a monitor and keys on the server, but yeah
> it works right.  The timing was good too, a hacker hit some of our machines
> last night.
> 
> 
>