Multiple IP's iptables

doublejoon · 02-01-2006, 10:57 AM

I'm not sure of how to list multiple IP's as a source in a rule .

This?

$iptables -A INPUT -s 10.0.0.2, 10.0.0.20 -p all -i eth0 -m multiport --dport 111,2049 -j ACCEPT

Or should it be two rules?

$iptables -A INPUT -s 10.0.0.2 -p all -i eth0 -m multiport --dport 111,2049 -j ACCEPT
$iptables -A INPUT -s 10.0.0.20 -p all -i eth0 -m multiport --dport 111,2049 -j ACCEPT

any help is appreciated.

macemoneta · 02-01-2006, 03:00 PM

The man page says:

Code:

       -s, --source [!] address[/mask]
              Source specification.  Address can be either a network  name,  a
              hostname  (please  note  that specifying any name to be resolved
              with a remote query such as DNS is a really bad idea), a network
              IP address (with /mask), or a plain IP address.  The mask can be
              either a network mask or a plain number, specifying  the  number
              of 1’s at the left side of the network mask.  Thus, a mask of 24
              is equivalent to  255.255.255.0.   A  "!"  argument  before  the
              address specification inverts the sense of the address. The flag
              --src is an alias for this option.

So if you don't want to specify a subnet , then two rules are needed.