Iptables Drop Icmp

krlos07 · 05-07-2011, 02:23 AM

Hi People Forum,

I have one machine with deux address ip's in eth1.

address ip 1 10.10.10.10
address ip 2 20.20.20.20

How i can only pcs with address 10.0.0.0/24 can ping 10.10.10.10 and pcs with address 20.0.0.0/24 can ping only 20.20.20.20.

par example

Quote:

#iptables -A INPUT 10.0.0.0/24 10.0.0.0/24 ACCEPT
#iptables -A INPUT 10.0.0.0/24 20.0.0.0/24 DROP

Quote:

#iptables -A OUTPUT 10.0.0.0/24 10.0.0.0/24 ACCEPT
#iptables -A OUTPUT 10.0.0.0/24 20.0.0.0/24 DROP

Thanks in Advance

systemlordanubis · 05-07-2011, 02:49 AM

If I'm reading your question correctly you want to block users in 10.0.0.0/24 from being able to ping the address 20.0.0.0/24. If this is the case, the code below should do what you need.

Iptables -I INPUT -s 10.0.0.0/24 -d 10.0.0.0/24 -j ACCEPT
Iptables -I INPUT -s 10.0.0.0/24 -d 20.0.0.0/24 -j DROP

Hope this helps
Anubis.

krlos07 · 05-09-2011, 11:01 AM

Quote:

Originally Posted by systemlordanubis

If I'm reading your question correctly you want to block users in 10.0.0.0/24 from being able to ping the address 20.0.0.0/24. If this is the case, the code below should do what you need.

Iptables -I INPUT -s 10.0.0.0/24 -d 10.0.0.0/24 -j ACCEPT
Iptables -I INPUT -s 10.0.0.0/24 -d 20.0.0.0/24 -j DROP

Iptables -I OUTPUT -s 10.0.0.0/24 -d 10.0.0.0/24 -j ACCEPT
Iptables -I OUTPUT -s 10.0.0.0/24 -d 20.0.0.0/24 -j DROP

Hope this helps
Anubis.

Thanks!