my iptables can't drop ip of 71.6.40.83

38699678 · 04-23-2008, 02:41 AM

hi
my iptables can't drop ip of 71.6.40.83 and i try to drop by mac.but it not work.
iptables -A INPUT -s '71.6.40.83' -j DROP
iptables -L
DROP all -- anywhere anywhere MAC 00:02:1A:01:37:7F
DROP all -- 71-6-40-83.static-ip.telepacific.net anywhere

dkm999 · 04-23-2008, 08:22 PM

Remove the single-quotes around the IP address. If that does not work, it is probably because an earlier rule in the INPUT chain is explicitly accepting the packets. Note that iptables stops looking when it finds a definitive rule saying what to do with a packet (definitive targets are ACCEPT, DROP, REJECT).