Re: Preventing access to local network ?
"Scott Tully" <[email protected]>
| Newsgroups | gmane.network.nocat |
|---|---|
| Message-ID | <[email protected]> |
nope. works fine for me. I think it's becuase the packet is not "destined" for that ip range, that the packet is still allowed to be routed through. I actually do this iptables -t nat -A NoCat_Capture -i eth1 -m mark --mark 1 -d $NET/24 -j ACCEPT iptables -t nat -A NoCat_Capture -i eth1 -d $NET/24 -j DROP this way Owners are allowed access to the lan.... I am not a master iptabler, but i know what works. A more technical explanation would be nice, but i am afraid you won't get it from me... Scott ----- Original Message ----- From: DZ Zimand To: Scott Tully ; [email protected] Sent: Tuesday, January 25, 2005 9:05 AM Subject: Re: [NoCat] Preventing access to local network ? Wilt this not prevent the host from seeing his default gateway (e.g. 192.168.1.1)? Scott Tully <[email protected]> wrote: iptables -t nat -A NoCat_Capture -i eth1 -d 192.168.1.0/24 -j DROP Should do it... Scott ----- Original Message ----- From: "Theo Platt" To: Sent: Tuesday, January 25, 2005 4:16 AM Subject: [NoCat] Preventing access to local network ? > > Hi there, > > We have a nocat gateway plugged into an ADSL router. If there are other > machines also plugged into the router they can all be 'seen' by an > authenticated user of the gateway. Is there any way in the config to prevent > this ? By adding in some iptables rules to stop access to 192.168.1.x (the > local router network) for example ? > > Cheers > > Theo > > _______________________________________________ > NoCat mailing list > [email protected] > http://lists.nocat.net/mailman/listinfo/nocat > > _______________________________________________ NoCat mailing list [email protected] http://lists.nocat.net/mailman/listinfo/nocat ------------------------------------------------------------------------------ Do you Yahoo!? Yahoo! Mail - 250MB free storage. Do more. Manage less.