On Wed, Oct 6, 2010 at 5:34 AM, mike lan <lan.mik...@gmail.com> wrote:
> hello > still learnin iptables. > I need to setup an iptables script for an untrusted lan network , the > firewall should only connect to two or three ip address on the lan and drop > any other ip address on the lan . > > thanks > > > -- > users mailing list > users@lists.fedoraproject.org > To unsubscribe or change subscription options: > https://admin.fedoraproject.org/mailman/listinfo/users > Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines > > I think this would do it: iptables -t filter --append INPUT --destination <ip address 1>,<ip address 2>,<ip address 3> -j ACCEPT iptables -t filter --append INPUT -j DROP so if the packet is going to one of the three trusted computers it gets accepted, otherwise dropped.
-- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines