On Monday 2005-November-28 11:15, Derick Anderson wrote: > > I think you should manually check the existence of possible > > duplicate before adding rule. Also you can do somethig like: > > > > iptables -D INPUT -d 192.168.0.2/32 -i eth1 -j DROP > > iptables -A INPUT -d 192.168.0.2/32 -i eth1 -j DROP > > > > Then you will never get duplicates. > > But the first way is more correct. > Just don't use that method remotely. Sure, just do them as a single command separated by ";". -- mail to this address is discarded unless "/dev/rob0" or "not-spam" is in Subject: header