> -----Original Message----- > From: netfilter-owner@xxxxxxxxxxxxxxx > [mailto:netfilter-owner@xxxxxxxxxxxxxxx] On Behalf Of Vimal > Sent: Tuesday, September 16, 2008 11:53 AM > To: Xu, Qiang (FXSGSC) > Cc: netfilter@xxxxxxxxxxxxxxx > Subject: Re: iptables not prevent access > > Just like you blocked client 119 and it failed, and then you > tried 120 and it worked; block the gateway and unblock 120. > If it works from 120, but it doesn't work from 119 (now), it > means that the request is coming from the gateway for 119. I just tried "iptables -p tcp -j REJECT -A INPUT -i eth0 -s 13.121.8.0/24 --dport 80", to block 13.121.8.* from accessing 8.106 via WebUI. But the blocking still fails. :-( -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html