$IPCHAINS -A soporte -s 10.0.1.1 -j MASQUERADE $IPCHAINS -A soporte -j DENY this rules does not work! (the second should be DROP, but what about the first one?) thanks! On Tue, 2003-05-27 at 20:11, George Vieira wrote: > Yes you can? You haven't reasearch much have you? > > Do this... > > IPCHAINS="/sbin/iptables" # ;) > > Just remember that iptables structure is different to ipchains in that INPUT is no longer part of the forwarding line.. it handles packets destined for itself ONLY.. > > Thanks, > ____________________________________________ > > -----Original Message----- > From: Esteban [mailto:eribicic@xxxxxxxxxxxx] > Sent: Wednesday, May 28, 2003 8:02 AM > To: netfilter@xxxxxxxxxxxxxxxxxxx > Subject: upgrade to iptabels from ipchains > > > i used to have this: > > $IPCHAINS -N soporte > $IPCHAINS -A FORWARD -s 10.0.0.0/25 -j soporte > $IPCHAINS -A soporte -s 10.0.1.1 -j MASQUERADE > $IPCHAINS -A soporte -j DENY > > how can i do this with iptables? > the idea is to use chains for each group. > > thanks! > > >