specifying a range of IP in IPTABLES

jomy · 12-23-2004, 01:56 AM

Hi,

How can I specify a range of IP Addresses in iptables.

for eg:

iptables -A INPUT -s 192.168.0.20 -j ACCEPT

How can I give a range here if I want to allow input for the range of ip addresses from 192.168.0.20-192.168.0.30

Regards,

Jomy

Hangdog42 · 12-23-2004, 07:30 AM

The usual way iptables works is using a netmask to do this. So the kind of rule to accept all of 192.168.0.0 would be

iptables -A INPUT -s 192.168.0.0/24 -j ACCEPT

However since you want to be more specific, you might try

iptables -A INPUT -s 192.168.0.20-192.168.0.30 -j ACCEPT

I know that sort of range specification works in the NAT and DNAT tables, but I've never tried it with INPUT.

You also might have a look throught the iptables tutorial for more info.