iptables Rules to block specific IP ranges

Aeterna · 12-25-2020, 07:59 PM

I would use DROP instead of REJECT
iptables -A INPUT -m iprange --src-range 10.0.0.0-10.40.0.0 -j DROP

on target IP

GazL · 12-26-2020, 04:32 AM

Quote:

Originally Posted by Aeterna

I would use DROP instead of REJECT
iptables -A INPUT -m iprange --src-range 10.0.0.0-10.40.0.0 -j DROP

on target IP

For incoming connections yes, DROP is likely better. For locally initiated outgoing connections -- which is what OP was asking about -- I prefer -j REJECT and --reject-with icmp-admin-prohibited