28 Jan
2003
28 Jan
'03
20:21
Arjen thanks, suppose I have to add -A FORWARD as well if I want to block access to the dmz Jaap On Tuesday 28 January 2003 20:41, Arjen de Korte wrote:
If you want to block IP address range xxx.xxx.xxx.xxx/yy, you can do this by putting
iptables -A INPUT -j DROP -s xxx.xxx.xxx.xxx/yy
in the section fw_custom_before_antispoofing() of /etc/sysconfig/scripts/SuSEfirewall2-custom. You need to enable the use of a custom firewall configuration at the end of /etc/sysconfig/SuSEfirewall2 as well. Read the comments in the custom configuration for further explanation.
-- jaap noordzij smokejumper at chello.nl