On Wed, 2004-12-15 at 18:07, Stoycho Sleptsov wrote: > Hi. > > I am new to iptables , so excuse me in advance for any strange > terminologies. > > I have the following configuration: > an external IP assigned to eth0. > 192.168.0.1 assigned to eth1. > ip_forward set to 1. > sshd waiting on 22. > > iptables: > > *filter > :INPUT DROP > :FORWARD DROP > :OUTPUT ACCEPT > > -A INPUT -i eth1 -j ACCEPT change that to: -A INPUT -i eth1 -d $ip_of_eth1 -j ACCEPT and packets that arrive on eth1 destined for eth0's IP address won't be accepted anymore. -j -- "I saw weird stuff in that place last night. Weird, strange, sick, twisted, eerie, godless, evil stuff. And I want in." --The Simpsons