Re: iptables DROP before PREROUTING

2020-01-09 Thread Jim Popovitch
On Fri, 2020-01-10 at 01:52 +0500, Alexander V. Makartsev wrote: > > The answer to your question, I believe, should look like this: > "iptables -I FORWARD -s 23.132.208.0/24 -j DROP" Thanks! That is what I am looking for. To be clear, I'm doing something much more complex, but the underlying iss

Re: iptables DROP before PREROUTING

2020-01-09 Thread Alexander V. Makartsev
On 10.01.2020 00:46, Jim Popovitch wrote: > Hello! > > Is there a way to have iptables DROP before PREROUTING. > > Consider this bit of rules on a home firewall, where 24.126.xx.yy is my > home external IP address. > > - > iptables -P INPUT DROP > iptables

Re: iptables DROP before PREROUTING

2020-01-09 Thread Reco
Hi. On Thu, Jan 09, 2020 at 02:46:25PM -0500, Jim Popovitch wrote: > Is there a way to have iptables DROP before PREROUTING. What you meant is "before PREROUTING in nat". It's an important bit, see below. > What I want to do is prevent 23.132.208.0/24 from access

iptables DROP before PREROUTING

2020-01-09 Thread Jim Popovitch
Hello! Is there a way to have iptables DROP before PREROUTING. Consider this bit of rules on a home firewall, where 24.126.xx.yy is my home external IP address. - iptables -P INPUT DROP iptables -P OUTPUT ACCEPT iptables -A INPUT -i lo -j ACCEPT iptables -A OUTPUT -o lo -j ACCEPT