On Wednesday 29 May 2002 7:28 am, Mark Atwood wrote: > How do I specify a set of match/reject rules such that if the source > does not have the specificly wanted IP address, it looks like nothing > is listening on the destination port?
iptables -A INPUT -s ! a.b.c.d -j DROP iptables -A FORWARD -s ! a.b.c.d -j DROP where a.b.c.d is the *wanted* IP address. Antony.