Hello,
how bout

ipchain -A input -s yahoo.com -j DENY
or
ipchains -A forward -d yahoo.com -j DENY

idea.....
to block packets coming from the internet use the INPUT chain.
to block packets coming from a LAN use the FORWARD chain.

just because from my understanding, OUTPUT chain is only for packets
originating on the firewal itself (local process). correct me if I am wrong.
opppps....

btw, diba it's better to use iptables than ipchians?

Cheers,

Ian Perez


> hi,
>
> i tried using your example..
> and i typed the following..
> "ipchains -A output -s 192.168.1.0/24 -d yahoo.com -j REJECT"
> am i doing it in correct format?
> it is not working..
> what is the proper way of doing this?
>
> regards,



_
Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]

To subscribe to the Linux Newbies' List: send "subscribe" in the body to 
[EMAIL PROTECTED]

Reply via email to