how to allow range of hosts in Iptables

irfanhab · 01-13-2006, 10:30 PM

say I want to allow all IPs from 127.34.5.0 to 127.34.5.255

how do I do it in iptables without enumerating each individually?
I saw this syntax on the internet

iptable -I INPUT -s 127.34.50/255 -ju DROP

but it says "invalid subnet mask", these are IP addresses to the internet not subnet or NAT addresses.

paragn · 01-14-2006, 12:55 AM

hi ,
its a typo or you really forget to insert dot betwwen 5 and 0 that mean correct syntax is
/sbin/iptables -A INPUT -s 127.34.5.0/255.255.0.0 -j DROP
you can check this

irfanhab · 01-14-2006, 09:36 AM

a slight correction:
/sbin/iptables -A INPUT -s 127.34.5.0/255.255.0.0 -j ACCEPT [not drop]

Yes this worked, that 0 thingy was not a typo.