[ale] Using iptables

[James P. Kinney III]

On Sun, 2006-06-25 at 08:23 -0600, JK wrote:

> #/usr/sbin/iptables -I INPUT -p tcp ! -s 218.23.45.2 --dport 80 -j DROP

/usr/sbin/iptables -I INPUT -p tcp -s ! 218.23.45.2 --dport -j DROP

More better. if source is NOT foo...

Also need a corresponding rule in FORWARD as this machine is a gateway
box and thus needs to block from the viewpoint of not destined to the
box itself (the INPUT table only handles traffic TO the machine itself).


-- 
James P. Kinney III          \Changing the mobile computing world/
CEO & Director of Engineering \          one Linux user         /
Local Net Solutions,LLC        \           at a time.          /
770-493-8244                    \.___________________________./
http://www.localnetsolutions.com

GPG ID: 829C6CA7 James P. Kinney III (M.S. Physics)
<jkinney at localnetsolutions.com>
Fingerprint = 3C9E 6366 54FC A3FE BA4D 0659 6190 ADC3 829C 6CA7
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part