[H-GEN] iptables assistance

[James Mills]

On Wed, Jun 22, 2005 at 08:53:16PM +1000, Sandra Mansell wrote:
> [ Humbug *General* list - semi-serious discussions about Humbug and     ]
> [ Unix-related topics. Posts from non-subscribed addresses will vanish. ]
> 
> It has become necessary for me to add a rule to my iptables firewall
> to block all packets from a particular ISP (preferably to drop them
> rather than reject them). I've had a go at reading the iptables
> manpage but can't seem to work out if this is possible or if I have to
> just add individual IP addresses as they become a problem (I can see
> the list quickly getting out of hand).... Does anyone know how to just
> drop all packets from a particular domain? Or direct me to the part of
> the manpage with the correct syntax (or a newbie website or something
> that has what I'm looking for).

iptables -A INPUT -p all -i ppp0 -s 202.163.12.3/24 -j DROP

Something like this... Assuming 202.163.12.3/24 is the IP block of the
ISP... That you would have to work out...

cheers
James

-- 
--
-"Problems are Solved by Method"
-