Le sam 17/05/2003 à 17:29, Julius Wijaya a écrit : > iptables -A FORWARD -i eth1 -p tcp \ > -s ! 172.16.30.185 \ > -d www.yahoo.com -j DROP > if i am not mistaken that rules means to drop all connection to > www.yahoo.com except from address 172.16.30.185 That's it. The exact meaning is to drop all connections to www.yahoo.com that _are not_ sourced from 172.16.30.185. There's a tiny tiny little difference ;))) -- Cédric Blancher <blancher@xxxxxxxxxxxxxxxxxx> IT systems and networks security - Cartel Sécurité Phone : +33 (0)1 44 06 97 87 - Fax: +33 (0)1 44 06 97 99 PGP KeyID:157E98EE FingerPrint:FA62226DA9E72FA8AECAA240008B480E157E98EE