Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #173900

iptables advice

From Pol Hallen <deben@fuckaround.org>
Newsgroups linux.debian.user
Subject iptables advice
Date 2016-10-27 13:40 +0200
Message-ID <swRcl-1j4-13@gated-at.bofh.it> (permalink)
Organization linux.* mail to news gateway

Show all headers | View raw


Hello all :-)

I've 2LAN (192.168.1/24 and 192.168.2/24) with these rules:

iptables -A FORWARD -s 192.168.1/24 -d 0/0 -j ACCEPT
iptables -A FORWARD -m state --state ESTABLISHED,RELATED -d 192.168.1/24 
-j ACCEPT

and same rules for 192.168.2/24: this allow each lan see other lan.

Can I deny only lan2 (192.168.2/24) to see lan1 (192.168.1/24) but allow 
lan1 see lan2?

thanks!

Pol

Back to linux.debian.user | Previous | Next — Next in thread | Find similar | Unroll thread


Thread

iptables advice Pol Hallen <deben@fuckaround.org> - 2016-10-27 13:40 +0200
  Re: iptables advice Dan Ritter <dsr@randomstring.org> - 2016-10-28 18:00 +0200
  Re: iptables advice Pascal Hambourg <pascal@plouf.fr.eu.org> - 2016-10-29 11:40 +0200

csiph-web