Iptables very strange issues

fan0o · 01-14-2016, 04:06 PM

This rule is working:

-A INPUT -p tcp -m tcp --dport 8989 -j ACCEPT

but this is not working:

-A INPUT -s X.X.X.X/32 -p tcp -m tcp --dport 8989 -j ACCEPT

Just adding the source address or let say limiting port 8989 access to one IP X.X.X.X/32, it fails can't i add -s X.X.X.X/32 is the above statement?

What wrong am i doing?

rknichols · 01-14-2016, 04:16 PM

Quote:

Originally Posted by fan0o

This rule is working:

-A INPUT -p tcp -m tcp --dport 8989 -j ACCEPT

but this is not working:

-A INPUT -s X.X.X.X/32 -p tcp -m tcp --dport 8989 -j ACCEPT

Are those two alternatives being placed at the same point in the INPUT chain? Iptables chains are evaluated in order, and the first matching rule with a terminating action (ACCEPT, REJECT, DROP) determines its fate.