Re: IP-Tables Question

[Craig Sanders <cas@taz.net.au>]

On Fri, Jan 28, 2005 at 12:33:28PM +0100, martin f krafft wrote:
> iptables -t filter -I INPUT -s 192.168.1.2/32 -j REJECT
> iptables -t filter -I FORWARD -s 192.168.1.2/32 -j REJECT
> 
> should do what you want. 

duh.  yes, that's simpler than what i wrote.

you also need a rule (before these two) on the INPUT & FORWARD chains allowing
192.168.1.2 to get to 192.168.0.0/16.  otherwise the windows server wont be
able to reach the linux router or any of the other 192.168 subnets.

craig

-- 
craig sanders <cas@taz.net.au>           (part time cyborg)