mark bag packets - iptables
"Indunil Jayasooriya" <[email protected]>
| Newsgroups | gmane.linux.network.routing |
|---|---|
| Message-ID | <[email protected]> |
Hi All, I want to create chains to mark bag packets. my firewall has 3 network cards. eth0 - connected to internet. eth1 - connected to DMZ eth2 - connected to LAN eth0 only accepts SSH (tcp -port 22) and ICMP for pinging.. If it gets anything other than that, I want to create a new chain and log and DROP . what are the suitable rules for it? what about the below rule? iptables -A INPUT -i eth0 -j bad_packets I think I need some more rules as well. Could you pls help me to go ahead. Similary, I need for FORWARD AND OUTPUT. But, If I write for INPUT , I will be able to write for FORAWAD AND OUTPUT chains. ANY IDEA? -- Thank you Indunil Jayasooriya _______________________________________________ LARTC mailing list [email protected] http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc