IPtables accept dest-IP other than the own

[Raphael Brunner <lilo-@gmx.ch>]

Dear Users

I use to control our Network wireshark on a hub. Now, to protect the
computer where wireshark is running, iptables is active. Now, my
question is, to collect the traffic, iptables must accept all the traffic.
Is it not dangerous to accept all IP's other than the own and drop only
the pakets with dest-ip to the IP of the Security-Box? Or are there some
known attacks? Ok, except flaws of wireshark, thats not possible to
protect. ;)

Thanks for your Ideas and opinions...
have a nice evening.
Raphael