-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I dont know if you can do that but you can do an equivalent
thing by doing the following

create /etc/banned_ip (or any location you prefer)

then put this in your rc.firewall script

for i in `cat /etc/queue_ip`
do
$IPC -A FORWARD -i eth1 -p udp -s ! $i/32 -j QUEUE
done

note that i've added '/32' just to make sure that only those
ip's are processed

that way, you will just edit the file /etc/queue_ip if you
want to add or delete IP's


Hope this helps

- --> jon

noong nakaraang Fri, 12 Sep 2003 20:23:24 -0700 (PDT)
si Carlos <[EMAIL PROTECTED]> ay sumulat ng ganito:

> in my rc.firewall script, i have these rules...
> 
> $IPC -A FORWARD -i eth1 -p udp -s ! 192.168.1.1 -j QUEUE
> $IPC -A FORWARD -i eth1 -p tcp -s ! 192.168.1.1 --syn -j
> QUEUE$IPC -A INPUT -i eth1 -p udp -s ! 192.168.1.1 -j
> QUEUE
>  
> now my question is this:  how can i put 2 ip addresses in
> this line?? can i do this?:
>  
> $IPC -A FORWARD -i eth1 -p udp -s ! 192.168.1.1,
> 192.168.1.76 -j QUEUE$IPC -A FORWARD -i eth1 -p tcp -s !
> 192.168.1.1, 192.168.1.76 --syn -j QUEUE$IPC -A INPUT -i
> eth1 -p udp -s ! 192.168.1.1, 192.168.1.76 -j QUEUE
>  
> help pls.
> 
> 
> 
> 
> ---------------------------------
> Do you Yahoo!?
> Yahoo! SiteBuilder - Free, easy-to-use web site design
> software


- -- 

Gabriel L. Briones III <[EMAIL PROTECTED]>
Network Administrator, Solid Electronics Corporation
Linux User # 273591
09189269576
- -----------------------------------------------


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQE/ZQ1YLruFIAIO/acRAoGHAJ9suUDqzAmvYCWPmqSkRiuCFgp9BACfZwy9
jLwDXtrZcgao5s1ABsAHEwQ=
=MSuC
-----END PGP SIGNATURE-----
--
Philippine Linux Users' Group (PLUG) Mailing List
[EMAIL PROTECTED] (#PLUG @ irc.free.net.ph)
Official Website: http://plug.linux.org.ph
Searchable Archives: http://marc.free.net.ph
.
To leave, go to http://lists.q-linux.com/mailman/listinfo/plug
.
Are you a Linux newbie? To join the newbie list, go to
http://lists.q-linux.com/mailman/listinfo/ph-linux-newbie

Reply via email to