Re: ! means on iptables

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Le sam 17/05/2003 à 17:29, Julius Wijaya a écrit :
> iptables -A FORWARD -i eth1 -p tcp \
> 	   -s ! 172.16.30.185 \
> 	   -d www.yahoo.com -j DROP
> if i am not mistaken that rules means to drop all connection to
> www.yahoo.com except from address 172.16.30.185

That's it.
The exact meaning is to drop all connections to www.yahoo.com that _are
not_ sourced from 172.16.30.185. There's a tiny tiny little difference
;)))

-- 
Cédric Blancher  <blancher@xxxxxxxxxxxxxxxxxx>
IT systems and networks security - Cartel Sécurité
Phone : +33 (0)1 44 06 97 87 - Fax: +33 (0)1 44 06 97 99
PGP KeyID:157E98EE  FingerPrint:FA62226DA9E72FA8AECAA240008B480E157E98EE



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux