RE: DROP command

RE: DROP command

[ISPList John]

Switch the order of the lines around.  Your packets are getting DROPPED
before the ACCEPT can see them.  <smile>

John

> Hi folks,
> 
> I have a Linux box firewall (iptables 1.2.7a) with NAT/MASQUERADING.
> How I can block all local network access to my firewall excluding some
> local[John Friel III]  IP addresses?
> I tried these command but it doesn't work:
> 
> /usr/local/sbin/iptables -A INPUT -i eth2 -s 10.105.105.0/24 -j DROP
> /usr/local/sbin/iptables -A INPUT -i eth2 -s 10.105.105.20 -j ACCEPT
> 

RE: DROP command

[Daniel Chemko]

Reverse the order

-----Original Message-----
From: Remus [mailto:rmocius@auste.elnet.lt] 
Sent: Thursday, July 03, 2003 1:44 PM
To: netfilter@lists.netfilter.org
Subject: DROP command

Hi folks,

I have a Linux box firewall (iptables 1.2.7a) with NAT/MASQUERADING.
How I can block all local network access to my firewall excluding some
local
IP addresses?
I tried these command but it doesn't work:

/usr/local/sbin/iptables -A INPUT -i eth2 -s 10.105.105.0/24 -j DROP
/usr/local/sbin/iptables -A INPUT -i eth2 -s 10.105.105.20 -j ACCEPT

Thank you in advance

Remus

Patch-o-matic help

[System Administrator]

anybody arround that can assist a new iptables administrator--I 
Hope..............

I have iptable 1.26 setup on a Redhat 8 server.  This server also needs to 
function as a PPTP VPN server.  It appears that PoPToP is the only reasonable 
way to acomplish that.  I can get PoTPoP to work but I am told that I need to 
be able to pass GRE packets.
  It looks like there is a patch to do this but requires patch-o-matic.  
Looking at the README, it looks like I run a command called runme.  and then 
recompile the Kernel.
  I'm yet to go through the recompile.  Anybody willing to help the 
inexperienced become experienced?

Thanks (in advance)
-- 
Leon Sonntag

DROP command

[Remus]

Hi folks,

I have a Linux box firewall (iptables 1.2.7a) with NAT/MASQUERADING.
How I can block all local network access to my firewall excluding some local
IP addresses?
I tried these command but it doesn't work:

/usr/local/sbin/iptables -A INPUT -i eth2 -s 10.105.105.0/24 -j DROP
/usr/local/sbin/iptables -A INPUT -i eth2 -s 10.105.105.20 -j ACCEPT

Thank you in advance

Remus