On Wed, Oct 6, 2010 at 5:34 AM, mike lan <lan.mike88(a)gmail.com> wrote:
still learnin iptables.
I need to setup an iptables script for an untrusted lan network , the
firewall should only connect to two or three ip address on the lan and drop
any other ip address on the lan .
users mailing list
To unsubscribe or change subscription options:
I think this would do it:
iptables -t filter --append INPUT --destination <ip address 1>,<ip address
2>,<ip address 3> -j ACCEPT
iptables -t filter --append INPUT -j DROP
so if the packet is going to one of the three trusted computers it gets
accepted, otherwise dropped.