Eu prefiro assim.

#!/bin/sh
LAN=192.168.0.0/24

iptables -t nat -A POSTROUTING -p tcp -s $LAN -d 0.0.0.0/0 --dport 1863 -j DROP
iptables -t nat -A POSTROUTING -s $LAN -d 64.215.169.48/24 -j DROP
iptables -t nat -A POSTROUTING -s $LAN -d 207.68.179.219/24 -j DROP
iptables -t nat -A POSTROUTING -s $LAN -d 65.54.142.189/24 -j DROP
iptables -t nat -A POSTROUTING -s $LAN -d 65.54.211.61/24 -j DROP
iptables -t nat -A POSTROUTING -s $LAN -d 200.216.69.232/24 -j DROP
iptables -t nat -A POSTROUTING -s $LAN -d 65.54.140.158/24 -j DROP
iptables -t nat -A POSTROUTING -s $LAN -d 206.63.10.99/24 -j DROP
iptables -t nat -A POSTROUTING -s $LAN -d 65.54.194.118/24 -j DROP
iptables -t nat -A POSTROUTING -s $LAN -d 194.129.79.6/24 -j DROP
iptables -t nat -A POSTROUTING -s $LAN -d 207.46.106.98/24 -j DROP
iptables -t nat -A POSTROUTING -s $LAN -d 207.46.104.20/24 -j DROP
iptables -t nat -A POSTROUTING -s $LAN -d 65.54.157.111/24 -j DROP
iptables -t nat -A POSTROUTING -s $LAN -d 207.46.110.12/24 -j DROP
iptables -t nat -A POSTROUTING -s $LAN -d 65.54.195.188/24 -j DROP
iptables -t nat -A POSTROUTING -s $LAN -d 207.46.108.86/24 -j DROP
iptables -t nat -A POSTROUTING -s $LAN -d 207.63.10.98/24 -j DROP
iptables -t nat -A POSTROUTING -s $LAN -d 207.46.110.43/24 -j DROP
iptables -t nat -A POSTROUTING -s $LAN -d 207.68.178.61/24 -j DROP

Apesar que...

#!/bin/sh
LAN=192.168.0.0/24

iptables -t nat -A OUTPUT -p tcp -s $LAN -d 0.0.0.0/0 --dport 1863 -j DROP
iptables -t nat -A OUTPUT -s $LAN -d 64.215.169.48/24 -j DROP
iptables -t nat -A OUTPUT -s $LAN -d 207.68.179.219/24 -j DROP
iptables -t nat -A OUTPUT -s $LAN -d 65.54.142.189/24 -j DROP
iptables -t nat -A OUTPUT -s $LAN -d 65.54.211.61/24 -j DROP
iptables -t nat -A OUTPUT -s $LAN -d 200.216.69.232/24 -j DROP
iptables -t nat -A OUTPUT -s $LAN -d 65.54.140.158/24 -j DROP
iptables -t nat -A OUTPUT -s $LAN -d 206.63.10.99/24 -j DROP
iptables -t nat -A OUTPUT -s $LAN -d 65.54.194.118/24 -j DROP
iptables -t nat -A OUTPUT -s $LAN -d 194.129.79.6/24 -j DROP
iptables -t nat -A OUTPUT -s $LAN -d 207.46.106.98/24 -j DROP
iptables -t nat -A OUTPUT -s $LAN -d 207.46.104.20/24 -j DROP
iptables -t nat -A OUTPUT -s $LAN -d 65.54.157.111/24 -j DROP
iptables -t nat -A OUTPUT -s $LAN -d 207.46.110.12/24 -j DROP
iptables -t nat -A OUTPUT -s $LAN -d 65.54.195.188/24 -j DROP
iptables -t nat -A OUTPUT -s $LAN -d 207.46.108.86/24 -j DROP
iptables -t nat -A OUTPUT -s $LAN -d 207.63.10.98/24 -j DROP
iptables -t nat -A OUTPUT -s $LAN -d 207.46.110.43/24 -j DROP
iptables -t nat -A OUTPUT -s $LAN -d 207.68.178.61/24 -j DROP

Tamb�m funciona.

Em 11/05/05, Fabr�cio Lamonica<[EMAIL PROTECTED]> escreveu:
> Pessoal,
> estou disponibilizando as regras no iptables para bloquear MSN.
---------------------------------------------------------------------------
Esta lista � patrocinada pela Conectiva S.A. Visite http://www.conectiva.com.br

Arquivo: http://bazar2.conectiva.com.br/mailman/listinfo/linux-br
Regras de utiliza��o da lista: http://linux-br.conectiva.com.br
FAQ: http://www.zago.eti.br/menu.html

Responder a