com estas regras efetuei o bloqueio que necessito # # # FORWARD chain #Regras pra restricao de acesso a ICQ $IPTABLES -A FORWARD -s 131.107.1.2 -d 205.188.179.233 -j ACCEPT $IPTABLES -A FORWARD -s 131.107.1.2 -d 64.12.162.57 -j ACCEPT $IPTABLES -A FORWARD -s 131.107.1.2 -d 205.188.153.97 -j ACCEPT $IPTABLES -A FORWARD -s 131.107.1.2 -d 205.188.153.100 -j ACCEPT $IPTABLES -A FORWARD -s 131.107.1.2 -d 205.188.153.101 -j ACCEPT $IPTABLES -A FORWARD -s 131.107.1.2 -d 205.188.153.102 -j ACCEPT $IPTABLES -A FORWARD -s 131.107.1.2 -d 205.188.153.103 -j ACCEPT $IPTABLES -A FORWARD -s 131.107.1.2 -d 205.188.153.98 -j ACCEPT $IPTABLES -A FORWARD -s 131.107.1.2 -d 205.188.153.99 -j ACCEPT # $IPTABLES -A FORWARD -s 131.107.0.0/16 -d 205.188.179.233 -j DROP $IPTABLES -A FORWARD -s 131.107.0.0/16 -d 64.12.162.57 -j DROP $IPTABLES -A FORWARD -s 131.107.0.0/16 -d 205.188.153.97 -j DROP $IPTABLES -A FORWARD -s 131.107.0.0/16 -d 205.188.153.100 -j DROP $IPTABLES -A FORWARD -s 131.107.0.0/16 -d 205.188.153.101 -j DROP $IPTABLES -A FORWARD -s 131.107.0.0/16 -d 205.188.153.102 -j DROP $IPTABLES -A FORWARD -s 131.107.0.0/16 -d 205.188.153.103 -j DROP $IPTABLES -A FORWARD -s 131.107.0.0/16 -d 205.188.153.98 -j DROP $IPTABLES -A FORWARD -s 131.107.0.0/16 -d 205.188.153.99 -j DROP # # $IPTABLES -A FORWARD -i $LAN_IFACE -j ACCEPT $IPTABLES -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT $IPTABLES -A FORWARD -m limit --limit 3/minute --limit-burst 3 -j LOG --log-level DEBUG --log-prefix "IPT FORWARD packet died: " # # +----------------------------------------------+ | Marcos Aurelio da Silva - Tecnico em Telecom | ++------------------------+-------------------++ | Linux user n. 164652 | Slackware 8.0 | | UIN: 47802921 | Kernel 2.4.10 | | S�o Paulo - SP | Pine 4.40 | +------------------------+-------------------+
Assinantes em 16/01/2002: 2225 Mensagens recebidas desde 07/01/1999: 150601 Historico e [des]cadastramento: http://linux-br.conectiva.com.br Assuntos administrativos e problemas com a lista: mailto:[EMAIL PROTECTED]
