Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I need to block some packets in ppp0, and the target ip or source ip of packets are not in

172.17.0.1/24, how to add rules in Iptables? thanks!

share|improve this question
add comment

2 Answers

up vote 1 down vote accepted

i'm not sure if this is what you really want but this is what you are describing:

iptables -N ppp0traffic
iptables -A ppp0traffic -s 172.17.0.0/24 -j ACCEPT
iptables -A ppp0traffic -d 172.17.0.0/24 -j ACCEPT
iptables -A ppp0traffic -j DROP

iptables -A FORWARD -i ppp0 -j ppp0traffic
iptables -A FORWARD -o ppp0 -j ppp0traffic
share|improve this answer
    
Equivalently, ! -s 172.17.0.0/24 ! -d 172.17.0.0/24 -j DROP, but anyhow, that implements and while OP's question (as I read it) asks for or –  ephemient Dec 1 '10 at 2:53
add comment

That would have been -A INPUT too.

But if you do not have a route to 172.17.0.0/24 (check with ip route show table all), then these packets get automatically dropped; no need for rules.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.