On Sat, 2 Mar 2002, Stevie O wrote:
> ipchains -a input -i eth0 -d ! 66.92.237.176 -j DENY -l
>
> With iptables i'd need that on both the INPUT *and* FORWARD rules...
create a 'filter' chain, attach it to INPUT -i eth0 and FORWARD -i
eth0.
maintain your 'filter' chain and you have the same as ipchains, but
with more flexibility for when you /do/ want rules to apply only to
local applications.
--paulj
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
This archive was generated by hypermail 2b29 : Thu Mar 07 2002 - 21:00:34 EST