More than one source IP in IPTABLES

gubak · 11-04-2009, 03:18 AM

Hi!

My question is about iptables:
Is it possible to specify more than one ip in -s (source)?
For example:
I want to drop all packets except those who coming from 5.2.2.2 and 5.2.2.11:

iptables -A FORWARD -i eth1 -s ! 5.2.2.2,5.2.2.11 -j DROP

But it does't work!

Can somebody help me?

Thanks

rupertwh · 11-04-2009, 03:31 AM

Unless you can arrange to have the accepted IPs in one subnet, you'll have to list them seperately, reversing the logic:

Code:

iptables -A FORWARD -i eth1 --src 5.2.2.2/32 -j ACCEPT
iptables -A FORWARD -i eth1 --src 5.2.2.11/32 -j ACCEPT
iptables -A FORWARD -i eth1 -j DROP