Messages in this thread | | | Date | Mon, 4 Mar 2002 18:14:47 +0000 (GMT) | From | Paul Jakma <> | Subject | Re: Network Security hole (was -> Re: arp bug ) |
| |
On Sat, 2 Mar 2002, Stevie O wrote:
> ipchains -a input -i eth0 -d ! 66.92.237.176 -j DENY -l > > With iptables i'd need that on both the INPUT *and* FORWARD rules...
create a 'filter' chain, attach it to INPUT -i eth0 and FORWARD -i eth0.
maintain your 'filter' chain and you have the same as ipchains, but with more flexibility for when you /do/ want rules to apply only to local applications.
--paulj
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |