At times I have needed to specify pairs of rules for the sources and the
destinations, even when sources and destinations are the same networks, i.e.
iptables -N netfilterup
iptables -A netfilterup -d $NETWORKS -j RETURN
iptables -A netfilterup -j DROP
iptables -N netfilterin
iptables -A netfilterin -s $NETWORKS -j RETURN
iptables -A netfilterin -j DROP
iptables -A FORWARD -i $INT_IFACEs -j netfilterup
iptables -A FORWARD -i $EXT_IFACEs -j netfilterin
Exists some way of writing something like that?
iptables -N netfilter
iptables -A netfilter -s/-d $NETWORKS -j RETURN
iptables -A netfilter -j DROP
iptables -A FORWARD -j netfilter
thanks,
julio
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
