Hello there,

i have to set up an ACL on my SuSE 9.1 machine using iptables. Unfortunately i have no idea how to do this. It would be very kind if someone can help me with that.

OK here it goes:

I have a small network with some clients and my SuSE server. I want to allow the client 192.168.1.15 to access the SuSE server (IP: 192.168.1.1) using HTTP, HTTPS, FTP, SSH, SSL. Everything else should be denied, also, all other clients should be totally locked out from the server.

I think it works something like this:

source 192.168.1.15 destination 192.168.1.1 allow HTTP HTTPS FTP SSH SSL
source any destination 192.168.1.1 deny any

Now it allows the one client only, and blocks all others. But what about the replies of the server which are being sent to the client which is permitted? Do I have to permit them too?

Thanks for your help!

You should read through the man pages:

#flush
iptables -F INPUT

#set default
iptables -P INPUT DROP

#rule - accept things from that ip for any of the following ports...
iptables -A INPUT -p tcp -s 192.168.1.15 -m multiport --dports "www,https,ftp,ftp-data,ssh" -j ACCEPT

You might find it easier to use a configuration program for iptables, eg. shorewall, guarddog or firestarter

hi i always recommend visiting this site to get started with Iptables

http://www.linuxhomenetworking.com/w...Using_iptables