iptables question

[Marco_113]

Hi all.
I've a linux iptales firewall.
One of the firewall network interface has a 172.16.50.0/24 network.

Behind the firewall there are several 172.16.x.x/24 networks.

Is possible to define only one rule:

INTERNAL=192.168.1.0/24
LAN_ALL=172.0.0.0/8

iptables -A FORWARD -s $LAN_ALL -d $INTERNAL -j ACCEPT

does it works for all the 172.16.x.x/24 networks??

Thanks

[Kodjo Agbenu]

Hi Marco,

You may try :

LAN_ALL=172.16.0.0/16

Good luck,
Kodjo

[farid S]

Marco,
From a security point of view: this is not recommanded. I rather define a matrix for all allowed and not allowed IPs.

BR.
Farid