Want to block all website traffic for few IP but they will brows only 1 site

aronnok · 05-21-2008, 12:45 PM

Hi all,
I want to block all the web sites for few peoples of our company. They will only be able to brows our web mail. the rest web traffic will be blocked. all other service (ftp, messenger) will be open.

Say we have 50 IP (Range 192.168.0.1-254). 45 of them will be blocked and the rest 5 can be able to access everything.

I am using iptables for my firewall. I tried couple of times, but failed. Could you please help me?

Thanks in advance.

stzein · 05-22-2008, 09:30 AM

you need something like this:

Code:

IPTABLES -A INPUT -s 1.2.3.4/24 -d 5.6.7.8 -p tcp --dport 80 -j ACCEPT

where 1.2.3.4/24 is your internal subnet and 5.6.7.8 is the server you want to allow. Be sure to deny by default, so don't can't go anywhere else

...but I'm not a specialist, so be sure to read up on the subject:
lots of links here
some more examples