Problems blocking a single IP

bruce1271 · 05-13-2003, 03:14 PM

I am using Iptables to block an IP address from reaching my http server.

I am using this format:

/sbin/iptables -A INPUT -s 24.61.212.175 -j DROP

What am I doing wrong?
It is still showing up in my error logs for http.

markus1982 · 05-13-2003, 03:34 PM

Well if you used it like that it will be ADDED to the input chain. So if you have 10 rules and rule 9 says that connections to port 80 = accepted and rule 10 is the block rule it will never be reached. you need to insert it as 1st rule:

/sbin/iptables -I INPUT 1 -s 24.61.212.175/32 -j DROP

This will insert is as first rule. If you need more help take a look at the manpage of iptables (man iptables).

bruce1271 · 05-13-2003, 03:59 PM

I gotcha, but wouldnt the last chain take precidence? Or is the 1st rule obeyed at all times?