topic Re: iptables question in Operating System - Linux

iptables question

Marco_113 — Fri, 04 Feb 2005 12:05:32 GMT

Hi all.
I've a linux iptales firewall.
One of the firewall network interface has a 172.16.50.0/24 network.

Behind the firewall there are several 172.16.x.x/24 networks.

Is possible to define only one rule:

INTERNAL=192.168.1.0/24
LAN_ALL=172.0.0.0/8

iptables -A FORWARD -s $LAN_ALL -d $INTERNAL -j ACCEPT

does it works for all the 172.16.x.x/24 networks??

Thanks

Re: iptables question

Kodjo Agbenu — Sat, 05 Feb 2005 17:23:23 GMT

Hi Marco,

You may try :

LAN_ALL=172.16.0.0/16

Good luck,
Kodjo

Re: iptables question

farid S — Wed, 13 Apr 2005 04:57:25 GMT

Marco,
From a security point of view: this is not recommanded. I rather define a matrix for all allowed and not allowed IPs.

BR.
Farid