1828239 Members
2406 Online
109975 Solutions
New Discussion

Re: iptables question

 
Marco_113
Frequent Advisor

iptables question

Hi all.
I've a linux iptales firewall.
One of the firewall network interface has a 172.16.50.0/24 network.

Behind the firewall there are several 172.16.x.x/24 networks.

Is possible to define only one rule:

INTERNAL=192.168.1.0/24
LAN_ALL=172.0.0.0/8

iptables -A FORWARD -s $LAN_ALL -d $INTERNAL -j ACCEPT

does it works for all the 172.16.x.x/24 networks??

Thanks
2 REPLIES 2
Kodjo Agbenu
Honored Contributor

Re: iptables question

Hi Marco,

You may try :

LAN_ALL=172.16.0.0/16

Good luck,
Kodjo
Learn and explain...
farid S
Frequent Advisor

Re: iptables question

Marco,
From a security point of view: this is not recommanded. I rather define a matrix for all allowed and not allowed IPs.

BR.
Farid