lkml.org 
[lkml]   [2002]   [Mar]   [4]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: Network Security hole (was -> Re: arp bug )
On Sat, 2 Mar 2002, Stevie O wrote:

> ipchains -a input -i eth0 -d ! 66.92.237.176 -j DENY -l
>
> With iptables i'd need that on both the INPUT *and* FORWARD rules...

create a 'filter' chain, attach it to INPUT -i eth0 and FORWARD -i
eth0.

maintain your 'filter' chain and you have the same as ipchains, but
with more flexibility for when you /do/ want rules to apply only to
local applications.

--paulj

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:24    [from the cache]
©2003-2011 Jasper Spaans. Advertise on this site