Re: how to drop an IP address

Hi there,

On Sun, 15 May 2016, Spyros Tsiolis wrote:

> One last; Does the command you suggest "play" for RED or it doesn't
> matter.  Just apply it verbatim ? (excluding a.b.c.d)

I'm not sure I understand the question.  Just apply it verbatim.

Rules in the FORWARD and CUSTOMFORWARD chains apply to packets which
the kernel would normally route between any two of your interfaces.

So if you have BLUE, RED and GREEN it would apply to packets going
between RED and GREEN or between BLUE and RED or between GREEN and
BLUE, unless you tailor the rule to apply to a particular interface
only.  You can decide on the direction (e.g. RED to GREEN but not
GREEN to RED) in which the rule is to be applied by specifying e.g.
'--source' or '--destination' or '--in-interface' or '--out-interface'
(or more than one of those) in the rule.  So in my example I used the
'--source' argument (the short form of '--source' is '-s').  Packets
from that address appear on the RED interface because of the wiring
(unless you connect your modem/router to the GREEN interface - I've
seen it done!) so only the RED interface will see those packets.

Of course there will be other rules, and they may be applied before or
after these forwarding rules, which in some cases might mean that the
packet never reaches the rule but is for example ACCEPTed or REJECTed
or DROPped by an earler rule.

It would be very worth-while to study the 'Netfilter' documentation:

http://www.netfilter.org/documentation/index.html

It's not as hard as it looks. :)

-- 

73,
Ged.

------------------------------------------------------------------------------
Mobile security can be enabling, not merely restricting. Employees who
bring their own devices (BYOD) to work are irked by the imposition of MDM
restrictions. Mobile Device Manager Plus allows you to control only the
apps on BYO-devices by containerizing them, leaving personal data untouched!
https://ad.doubleclick.net/ddm/clk/304595813;131938128;j
_______________________________________________
IPCop-user mailing list
[email protected]
Manage your subscription or unsubscribe
https://lists.sourceforge.net/lists/listinfo/ipcop-user