From: Drew Weaver <drew.weaver@thenap.com>
To: netfilter@lists.netfilter.org
Subject: allowing certain IP addresses.
Date: Sat, 17 May 2003 02:26:58 -0400 [thread overview]
Message-ID: <75634F04BFCFD511BF69009027DC8649484265@mailman.thenap.com> (raw)
I would like to disclude a /25 from accessing a server except for 1 ip
address on that /25 this is what I have in my rules.
/sbin/iptables -A INPUT -i eth0 -s 10.1.0.0/25 -j DUMP
/sbin/iptables -A INPUT -i eth0 -s 10.1.0.52/32 -j ACCEPT
the blocking works, the 10.1.0.0/25 network cannot reach this server,
however the 10.1.0.52/32 cant either.
I have one other question, this skeleton script I downloaded has these:
/sbin/iptables -A INPUT -i eth0 -s 5.0.0.0/8 -j DUMP
/sbin/iptables -A INPUT -i eth0 -s 10.0.0.0/8 -j DUMP
/sbin/iptables -A INPUT -i eth0 -s 23.0.0.0/8 -j DUMP
/sbin/iptables -A INPUT -i eth0 -s 27.0.0.0/8 -j DUMP
/sbin/iptables -A INPUT -i eth0 -s 31.0.0.0/8 -j DUMP
/sbin/iptables -A INPUT -i eth0 -s 68.0.0.0/6 -j DUMP
/sbin/iptables -A INPUT -i eth0 -s 72.0.0.0/5 -j DUMP
/sbin/iptables -A INPUT -i eth0 -s 80.0.0.0/4 -j DUMP
/sbin/iptables -A INPUT -i eth0 -s 96.0.0.0/3 -j DUMP
/sbin/iptables -A INPUT -i eth0 -s 127.0.0.0/8 -j DUMP
/sbin/iptables -A INPUT -i eth0 -s 128.0.0.0/16 -j DUMP
/sbin/iptables -A INPUT -i eth0 -s 128.66.0.0/16 -j DUMP
/sbin/iptables -A INPUT -i eth0 -s 169.254.0.0/16 -j DUMP
/sbin/iptables -A INPUT -i eth0 -s 172.16.0.0/12 -j DUMP
/sbin/iptables -A INPUT -i eth0 -s 191.255.0.0/16 -j DUMP
/sbin/iptables -A INPUT -i eth0 -s 192.0.0.0/16 -j DUMP
/sbin/iptables -A INPUT -i eth0 -s 192.168.0.0/16 -j DUMP
/sbin/iptables -A INPUT -i eth0 -s 197.0.0.0/8 -j DUMP
/sbin/iptables -A INPUT -i eth0 -s 201.0.0.0/8 -j DUMP
/sbin/iptables -A INPUT -i eth0 -s 204.152.64.0/23 -j DUMP
/sbin/iptables -A INPUT -i eth0 -s 224.0.0.0/3 -j DUMP
/sbin/iptables -A INPUT -i eth0 -s 240.0.0.0/8 -j DUMP
listed as unroutable, or private ip addresses but I know some of these are
actually being used on the net, NOW months after the skeleton was written,
anyone know or know how to find out which ones I should remove?
Thanks for any advice.
-Drew
next reply other threads:[~2003-05-17 6:26 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2003-05-17 6:26 Drew Weaver [this message]
2003-05-17 7:17 ` allowing certain IP addresses Andreas Jellinghaus
2003-05-17 7:27 ` Cedric Blancher
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=75634F04BFCFD511BF69009027DC8649484265@mailman.thenap.com \
--to=drew.weaver@thenap.com \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox