Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I am needing to set up IPtables to accept traffic on many internal IP's. Is there a wildcard I can use for part of the ip address? For example: 192.168..

Or would there a better alternative?

share|improve this question

closed as off-topic by Jenny D, growse, Nathan C, Dave M, Ward Jul 11 '13 at 13:39

  • This question does not appear to be about professional server, networking, or related infrastructure administration within the scope defined in the help center.
If this question can be reworded to fit the rules in the help center, please edit the question.

3  
This question appears to be off-topic because it is about basic unix/linux knowledge and would be better off at unix.stackexchange.com. –  Jenny D Jul 11 '13 at 9:23
add comment

5 Answers 5

iptables does not know wildcards but used the CIDR method. F.e: -s 192.168.0.0/24 will cover all the hosts from 192.168.0.1 to 192.168.0.254.

You can find more info about CIDR here

share|improve this answer
add comment

No wildcard per se, but you can specify a CIDR netmask:

192.168.0.0/16

The above would be the CIDR equivalent of the example you gave.

share|improve this answer
add comment

Not really a wildcard, you can match IP Adresses by subnets:

192.168.0.0/16 192.168.1.0/24 192.168.2.0/25

Another way is to use ipranges like this: iptables -A INPUT --destination-port 80 -m iprange --src-range From_IP-To_IP -j ACCEPT

There is a second module for --dest-range as well.

share|improve this answer
add comment

iptables supports using CIDR notation, so for your example you can use 192.168.0.0/16.

Unrelatedly, please consider working on your accept-rate.

share|improve this answer
add comment

For future googlers, as of current version of iptables 1.4.7

Single port IP Range

iptables -A INPUT -p tcp --dport 8080 -m iprange --src-range 192.168.0.0-192.168.254.254 -j ACCEPT

Multiple port IP Range

iptables -A INPUT -p tcp -m multiport --dports 21,8080 -m iprange --src-range 192.168.0.0-192.168.254.254 -j ACCEPT
share|improve this answer
add comment

Not the answer you're looking for? Browse other questions tagged or ask your own question.