CFS IP help cfs.allow vs cfs.deny

Sethos · 08-25-2015, 01:49 PM

I am trying to set this up where i allow 192.168.0.1/24 but deny my gateway 192.168.0.1.
With raw iptables this would not be that hard, but with cfs i think cfs.allow overrides cfs.deny.
Any clues?

FYI: THIS IS A HOME SERVER USED LOCALLY FOR NFS SAMBA VIRTALBOX AND SUCH, NOT PUBLIC WEB SERVER.

P.s. Pardon the caps i'm legally blind, not screaming.

michaelk · 08-26-2015, 07:08 AM

In the smb.conf global section you can deny a single host access within the same subnet like:

hosts allow = 192.168.0.0/24 localhost
hosts deny = 192.168.0.1

goodhombre · 09-19-2015, 02:57 AM

Quote:

Originally Posted by Sethos

I am trying to set this up where i allow 192.168.0.1/24 but deny my gateway 192.168.0.1.
With raw iptables this would not be that hard, but with cfs i think cfs.allow overrides cfs.deny.
Any clues?

FYI: THIS IS A HOME SERVER USED LOCALLY FOR NFS SAMBA VIRTALBOX AND SUCH, NOT PUBLIC WEB SERVER.

P.s. Pardon the caps i'm legally blind, not screaming.

Or just try to add these to csf.deny :

Code:

192.168.0.2/31
192.168.0.4/30
192.168.0.8/29
192.168.0.16/28
192.168.0.32/27
192.168.0.64/26
192.168.0.128/26
192.168.0.192/27
192.168.0.224/28
192.168.0.240/29
192.168.0.248/30
192.168.0.252/31
192.168.0.254/32