On 07/15/2011 09:46 AM, Jatin K wrote:
> On Friday 15 July 2011 03:10 PM, James Hogarth wrote:
>>
>>> '!' Solved my problem
>>>
>> Really? Because what you have there is the opposite of that which you 
>> stated you were trying to accomplish in your first post.
>>
>> Now that IP is the only IP that can access your FTP server and all 
>> others get dropped.
>>
> yes  and thats what I wanted ,,,,, Only specified IP can ftp to the server
---


which is not what you stated in your first post, which was;

}> I want to deny a particular IP (172.16.158.111) address in my network to
}> FTP on server (RHEL6), I'm trying to add the following[1][2] iptabls
}> rules on server  and getting error [3]


therefore, if you want to drop "IP (172.16.158.111)", you would use;


  [1] iptables -A INPUT -s 172.16.158.111 -p tcp --dport 21 -j DROP
  [2] iptables -A INPUT -s 172.16.158.111 -p tcp --dport 20 -j DROP

if you want to drop all except "IP (172.16.158.111)", you would use;

  [1] iptables -A INPUT -s ! 172.16.158.111 -p tcp --dport 21 -j DROP
  [2] iptables -A INPUT -s ! 172.16.158.111 -p tcp --dport 20 -j DROP

-- 

peace out.

tc.hago,

g
.

****
in a free world without fences, who needs gates.
**
help microsoft stamp out piracy - give linux to a friend today.
**
to mess up a linux box, you need to work at it.
to mess up an ms windows box, you just need to *look* at it.
**
The installation instructions stated to install Windows 2000 or better.
So I installed Linux.
**
learn linux:
'Rute User's Tutorial and Exposition' http://rute.2038bug.com/index.html
'The Linux Documentation Project' http://www.tldp.org/
'LDP HOWTO-index' http://www.tldp.org/HOWTO/HOWTO-INDEX/index.html
'HowtoForge' http://howtoforge.com/
****

Attachment: signature.asc
Description: OpenPGP digital signature

-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines

Reply via email to