I want to allow access to -d 202.63.167.193 and deny to all other destination. Solutins you have given will restrict access to port 25 at all destinations. Thanks for support. --- Logechnik Alexandr <A.Logechnik@xxxxxxx> wrote: > ads nat wrote: > > >Hi, > >I want block forwarding as follows : > > > >"iptables -I INPUT 1 -i eth1 -p tcp -m tcp --dport > 25 > >-m mac --mac-source 00:08:A1:53:BE:71 -d ! 10.0.0.2 > -j > >DROP" > > > >it does not work but when I try to do same thing > with > >rule > >"iptables -D FORWARD -i eth1 -p tcp -m tcp --dport > 25 > >-s 192.168.0.42 -d ! 10.0.0.2 -j DROP" > > > >Is there any sytax error. > > > >Or Do I have to installed any additional module of > >iptables. > >I am using Redhat 9.0 Linux. > >Please guide me. > > > >Thanks for support. > > > Sorry, for the fulless answer. > > You not need: > iptables -I INPUT 1 -i eth1 -p tcp --dport 25 -m mac > --mac-source > 00:08:A1:53:BE:71 -j DROP > > You need: > iptables -A FORWARD -p tcp --dport 25 -m > --mac-source 00:08:A1:53:BE:71 > -j DROP > > -- > wbr, Logechnik Alexandr > > In God we trust, but something > else must have X.509 certificate > > > __________________________________ Do you Yahoo!? Yahoo! Mail Address AutoComplete - You start. We finish. http://promotions.yahoo.com/new_mail
