simple iptables rule

Question

I have two network interfaces eth0 and an alias eth0:1 that is my internal network. I want to block port 8140 but also have a rule allowing ANYTHING from the eth0:1 subnet (192.168.1.0/24)

Here is the rule that I have but it seems to be blocking 8140 on all interfaces

iptables -A INPUT -s 192.168.1.0/24  -j ACCEPT
iptables -A INPUT -p tcp --destination-port 8140 -j DROP


Chain INPUT (policy ACCEPT 7 packets, 400 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       192.168.1.0/24       0.0.0.0/0           
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:8140 

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy ACCEPT 10 packets, 1400 bytes)
 pkts bytes target     prot opt in     out     source               destination    

Answer 1

Try this:

iptables -A INPUT -p tcp -s \! 192.168.1.0/24 --dport 8140 -j DROP

Answer 2

Please the sequence of the writing the rule.

First write the second rule as you have typed. and the write the second rule.

Then after save the iptables and restart the iptables service to make it effective. Then do testing of it.

It should work.

Answer 3

You are unclear about what you want to happen - if you want to block TCP/8140 regardless of where it is coming from, it should be the first rule, otherwise, your existing setup is fine; 192.168.1.0/24 is free to communicate with 8140, everything else cannot.