Re: iptables; some IPs are getting through netmasks

> Is the above your complete iptables ruleset? Is this ruleset on the mail > > server in question, or on a seperate box? If on a seperate box, is it > > acting as a router, are you doing any NAT? It's all on the same box. It's a complete ruleset except the additional DROP lines which are identi

Re: iptables; some IPs are getting through netmasks

No other rules, see next post.. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/572de1d1-09a2-4adb-a3b1-ea1c031f3...@googlegroups.com

Re: iptables; some IPs are getting through netmasks

I've checked my mainlog and the originating ip appears to be exactly the same as the email header; 67.228.245.121 Could it be ip spoofing? How would they do that? Or maybe exim is somehow accepting connections over udp? - I'm clutching at straws! Hoping someone can help me solve this. Thank yo

Re: iptables; some IPs are getting through netmasks

Here is a shortened version of the output from iptables-save (full version simply has more "-A pests" lines). # Generated by iptables-save v1.4.8 on Sun Dec 23 16:24:43 2012 *filter :INPUT ACCEPT [252417:278747603] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [255016:258290199] :pests - [0:0] -A INPUT -p

iptables; some IPs are getting through netmasks

I am hoping someone can help show me where I'm going wrong. I have iptables setup in the following way, basically, I am using the chain "pests" to drop data from certain IPs. Chain INPUT (policy ACCEPT) target prot opt source destination pests tcp -- 0.0.0.0/0