Re: [leaf-user] Blacklist in Shorewall (Bering)

[Tom Eastep]

--On Monday, January 06, 2003 12:08:55 PM -0500 Binh Do <[EMAIL PROTECTED]> wrote:

Thank you Tom for the clarification. I thought that eth0 means the main IP
for that interface, but I guess I am wrong. So if I want to block some IPs
from all external IPs, then blocking from interface eth0 would do.
Correct?

Binh -- the backlist is for INBOUND TRAFFIC ONLY! So you block traffic TO your external interface, not FROM it.

-Tom
--
Tom Eastep \ Shorewall - iptables made easy
Shoreline, \ http://shorewall.sf.net
Washington USA \ [EMAIL PROTECTED]



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html