iptables command/iptables GUI?

basketkase999 · 04-09-2005, 01:19 PM

Hey All,

I have two questions. First, if i wanted to block an ip or ip range what is the command to do so? Secondly, is there a GUI which manages iptables?

Cheers,
Cesar

zeos · 04-09-2005, 01:37 PM

iptables -A INPUT -i eth0 -s ip.to.be.blocked -m state --state NEW -j DROP

for instance:

iptables -A INPUT -i eth0 -s 61.31.1.100 -m state --state NEW -j DROP

would drop inbound packets to eth0 from that ip ...

iptables -A INPUT -i eth0 -s 61.31.0.0/24 -d any/0 -m state --state NEW -j DROP

would drop packets from 61.31.0.0 - 61.43.255.255

alot of folks use "firestarter" as a gui to iptables, can't say that I have, but it seems fairly popular.

win32sux · 04-10-2005, 08:54 AM

Quote:

Originally posted by zeos
iptables -A INPUT -i eth0 -s 61.31.0.0/24 -d any/0 -m state --state NEW -j DROP

would drop packets from 61.31.0.0 - 61.43.255.255

actually, that example would only drop packets from 61.31.0.0 - 61.31.0.255...

BTW, IMHO it's simpler and more effective to block the IP or subnet without specifying the packet's state... like, for one IP:

Code:

iptables -A INPUT -s 61.31.0.112 -j DROP

or for the whole subnet:

Code:

iptables -A INPUT -s 61.31.0.0/24 -j DROP

just my two cents...

basketkase999 · 04-11-2005, 12:49 AM

Thanks a lot guys! I appreciate it

doublejoon · 04-12-2005, 11:47 AM

maybe give "guarddog" a try as well for GUI

Imanerd · 04-12-2005, 02:43 PM

I use Gnome and I just go to System settings>Security and configure it from there.