> ipchains -a input -i eth0 -d ! 66.92.237.176 -j DENY -l
>
> With iptables i'd need that on both the INPUT *and* FORWARD rules...
create a 'filter' chain, attach it to INPUT -i eth0 and FORWARD -i
eth0.
maintain your 'filter' chain and you have the same as ipchains, but
with more flexibility for when you /do/ want rules to apply only to
local applications.
--paulj
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/