I'm trying to keep a machine on my network off the Internet. I've tried this rule. /sbin/iptables -A INPUT -p udp -i eth1 -s 192.168.1.107/32 -d 0.0.0.0/0 -j DROP And the same for tcp. The machine can still access the Internet. What am I doing wrong?