Re: can this be written as one rule ?

[Stephen Frost <sfrost@xxxxxxxxxxx>]

* U. George (netbeans@xxxxxxxxxxxx) wrote:
>> $IPTABLES -t nat -A PREROUTING -i $INET_IFACE -s 121.124.176.0/20 -j DROP
>
> And so on ?

You can (ab)use ipt_recent to do it.  There might be other ways but the
gist of it would be to build an ipt_recent table with those addresses at
boot and then reference it using an --rcheck or similar.

	Enjoy,

		Stephen

Attachment: signature.asc
Description: Digital signature