Re: Vijay - port 25 to be blocked

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Vijay Kumar wrote:
Hi,

I want to allow my internal network to only connect to some specific email
servers.
Apart from these mail server I want to block port 25 and 110 from my
internal network to anywhwere. I am doing the following :


iptables -I INPUT -I eth0 --dport 25 -d !<ip addr of mail server> -j
REJECT This does not seem to block the port 25 traffic. Where am I going wrong?


Kindly help.

Regards,
Vijay Kumar



Lemme try this again,

I believe that this needs to be in the "forward" table, not the "input" table.

IIRC, Input is just for traffic destined to the firewall box itself, the mail servers that you're talking to are on the far side of the firewall, if I read you correctly.


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux