[SLE] A question for the iptables gurus. :)

From: Ben Rosenberg (red.kryptonite_at_gmail.com)
Date: 11/04/05

  • Next message: Sid Boyce: "Re: [SLE] frequent hard disk failures - 9.3?"
    Date: Thu, 3 Nov 2005 20:44:02 -0800
    To: sle <suse-linux-e@suse.com>
    
    

    I'm trying to write some iptables rules so that I can let someone
    telnet to machines on a 10.0.0.0 network but not allow them to telnet
    anywhere else.. effectively blocking outbound telnet to ANYTHING
    except the machines on the 10.0.0.0 network. I thought I had it but I
    guess I don't. The rules are as follows...

    # allow outgoing telnet traffic
    /usr/sbin/iptables -A FORWARD -p TCP -i eth2 -d 10.0.0.0/8 --dport 23 -j ACCEPT
    # block all other outgoing telnet traffic
    /usr/sbin/iptables -A FORWARD -p TCP -i eth2 -d 0/0 --dport 23 -j DROP

    This machine is a Compaq DL760 with 2 dual port 10/100 cards in it and
    eth2 is the first port on card 2.

    Any help would be appreciated.

    Thanks!

    -Ben

    --
    Atheism is a non-prophet organization.
    -- 
    Check the headers for your unsubscription address
    For additional commands send e-mail to suse-linux-e-help@suse.com
    Also check the archives at http://lists.suse.com
    Please read the FAQs: suse-linux-e-faq@suse.com
    

  • Next message: Sid Boyce: "Re: [SLE] frequent hard disk failures - 9.3?"

    Relevant Pages

    • Re: Need help with Lan Config
      ... > X apps on another computer on the network. ... > telnet or ssh into the machine I want to run the X programs from. ... My system is two linux machines connected to a Belkin cable router ...
      (comp.os.linux.networking)
    • Re: Exch2k3 drops remote connection attempts
      ... network telnet is working as it should be. ... If you connect from the internet ... to the smtp port than the server drops the connection. ...
      (microsoft.public.exchange.admin)
    • Re: Vista Home Premium cant RDP to Server2003 from Internet
      ... installation of an Open Source telnet substitute isn't ... Networking, Internet, Routing, VPN Troubleshooting on ... How to Setup Windows, Network, VPN & Remote Access on ...
      (microsoft.public.windows.vista.networking_sharing)
    • Telnet - attempting to initiate a telnet session within an established telnet session
      ... network connectivity and one for connectivity between slots. ... Ethernet backplane and each slot has a different IP address (10.0.0.9 ... I am trying to build a script with Ruby that allows me to first telnet ...
      (comp.lang.ruby)
    • Re: nethack.alt.org server down?
      ... their nameservers aren't responding. ... maybe their hosting service has some network problems. ... but telnet just hangs. ... could be hardware network card failure or power related too. ...
      (rec.games.roguelike.nethack)