iptables how drop ip address

issin · 09-02-2004, 01:34 AM

I want 192.168.1.123 can't connect to internet, other IP can connect to internet, what can I do for iptables?

Now, iptables:
#iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE

ppuru · 09-02-2004, 01:42 AM

You can

iptables -I FORWARD -i <your internal NIC> -s 192.168.1.123 -j REJECT

issin · 09-02-2004, 02:07 AM

thanks!

issin · 09-02-2004, 02:38 AM

If drop some ip, can make ip list do it?

ppuru · 09-02-2004, 06:45 AM

You can do something like
http://www.linuxquestions.org/questi...615#post990615

replace the mac with ipaddresses

for exmple

iptables -N droplist
iptables -A droplist -s ! 192.168.1.124 -j RETURN
iptables -A droplist -s ! 192.168.1.154 -j RETURN
iptables -A droplist ACCEPT

iptables -A FORWARD .... -j droplist