Hi
I have a RHEL3 server running. On running iftop it shows heavy traffic from one of my local LAN IP which is behind the proxy.
i have done
iptables -A INPUT -s 192.168.10.101 -j DROP
iptables -A OUTPUT -d 192.168.10.101 -j DROP
But still iftop shows heavy traffic comming toand fro from this ip. How to I stop all traffic to and from the ip 192.168.10.101

Sanjib Gupta

that should work fine, so maybe you've added it in the wrong part of the ruleset? after an alternative ACCEPT entry maybe? What does "iptables -vnL" say?

iptables -vnl
Chain OUTPUT (policy ACCEPT 8521K packets, 6029M bytes)
pkts bytes target prot opt in out source destination
3 354 DROP all -- * * 0.0.0.0/0 192.168.10.101
Chain INPUT (policy ACCEPT 4320K packets, 5311M bytes)
pkts bytes target prot opt in out source destination
0 0 DROP all -- * * 192.168.10.101 0.0.0.0/0

iftop -i eth2 output

pool-173-72-57-102.cmdnnj.fios.verizon.net => 192.168.10.101 916Kb 743Kb 340Kb
<= 15.7Kb 12.9Kb 5.96Kb
173.194.14.112 => 192.168.10.138 351Kb 550Kb 348Kb
<= 10.3Kb 8.59Kb 5.50Kb
cm27.kappa176.maxonline.com.sg => 192.168.10.101 39.6Kb 31.9Kb 22.8Kb
<= 482Kb 378Kb 266Kb
117.194.7.138 => 192.168.10.101 28.3Kb 57.9Kb 67.3Kb
<= 74.8Kb 347Kb 333Kb
117.192.25.196 => 192.168.10.101 264Kb 168Kb 79.0Kb
<= 159Kb 169Kb 151Kb
cpc1-wolv12-0-0-cust790.wolv.cable.virginmedia.com => 192.168.10.101 2.84Kb 3.95Kb 4.30Kb
<= 129Kb 210Kb 216Kb
bb219-74-41-50.singnet.com.sg => 192.168.10.101 5.42Kb 5.19Kb 2.34Kb
<= 159Kb 145Kb 60.2Kb
host86-162-217-161.range86-162.btcentralplus.com => 192.168.10.101 223Kb 133Kb 314Kb
<= 4.31Kb 2.59Kb 5.44Kb
pool-173-51-92-21.lsanca.fios.verizon.net => 192.168.10.192 776b 2.04Kb 1.61Kb
<= 132Kb 132Kb 92.4Kb
115.78.133.255 => 192.168.10.101 5.74Kb 3.94Kb 3.95Kb
<= 182Kb 125Kb 129Kb
dsl.49.144.142.42.pldt.net

Oh, you mean this is on the proxy? You're on a box in the middle?? In that case it's the FORWARD table you need to look at, not INPUT / OUTPUT.

How to control FORWARD chain
Sanjib Gupta

just the same as the other ones, replace INPUT with FORWARD

Thanks it worked
Sanjib Gupta