Disallow IP to access WAN

vsoemlio · 05-22-2007, 08:11 AM

how do I disallow an IP on my network to access the Internett? I use iptables and Debian.

theNbomr · 05-22-2007, 03:25 PM

Are you looking for rules to put in a firewall? If yes

Code:

iptables -I FORWARD --source 192.168.xx.xx -j DROP

should get pretty close. Use the appropriate IP.
--- rod.

vsoemlio · 05-22-2007, 04:08 PM

Thanks, but how do I remove it again ?

Brad.Scalio@noaa.gov · 05-22-2007, 04:24 PM

Quote:

Originally Posted by vsoemlio

Thanks, but how do I remove it again ?

I would use Reject instead of Drop and use the INPUT table instead, but just a preference, regardless that should work, to drop the rule:

Code:

iptables -nvL --line-numbers

then see what the line number of the rule you want to delete

Code:

iptables -D FORWARD # (where # is the line number reported by above command)

vsoemlio · 05-22-2007, 04:31 PM

Oh thank you. It works