Re: Multiple Source Addresses

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Keller Nicolas wrote:

Hi!

I want to log every packet that *doesn't* come from IP1 and IP2 (because
these two hosts should be the only one that communicate with the
Firewall). Up to now I couldn't figure out a way to do this, as it is
NOT possible to include multiple source addresses in one line, like
this:

iptables -A INPUT -s !192.168.43.1 !192.168.43.2 -j LOG

Anyone can show me a way to get this to work?



Simple.


iptables -N LOGSOME
iptables -A INPUT -j LOGSOME
iptables -A LOGSOME -s 192.168.43.1 -j RETURN
iptables -A LOGSOME -s 192.168.43.2 -j RETURN
iptables -A LOGSOME -j LOG

HTH,
M4




[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux