Re: iptables rule to block when DNAT is used

2003-04-08 Thread Phillip Hofmeister
On Tue, 08 Apr 2003 at 03:17:18PM -0700, Kevin Buhr wrote: > > Also note that the mangle PREROUTING chain is run on all incoming > packets before any other chain, so: > > iptables -t mangle -I PREROUTING -s badbox.evil -j DROP > > should drop all packets from "badbox.evil" before any oth

Re: iptables rule to block when DNAT is used

2003-04-08 Thread Kevin Buhr
Hanasaki JiJi <[EMAIL PROTECTED]> writes: > > Firewall has rules to DNAT incoming traffic to a port on a DMZ box. > > how can an iptable rule be written to block some ip addresses before > they get to the rules > iptables -t mangle -A FORWARD > AND > iptables -t nat -A PR

Re: iptables rule to block when DNAT is used

2003-04-08 Thread Victor Calzado Mayo
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi On Tuesday 08 April 2003 03:04, Hanasaki JiJi wrote: > Firewall has rules to DNAT incoming traffic to a port on a DMZ box. > > how can an iptable rule be written to block some ip addresses before > they get to the rules > iptables -t mangle -A

iptables rule to block when DNAT is used

2003-04-07 Thread Hanasaki JiJi
Firewall has rules to DNAT incoming traffic to a port on a DMZ box. how can an iptable rule be written to block some ip addresses before they get to the rules iptables -t mangle -A FORWARD AND iptables -t nat -A PREROUTING ???