Fedora Users — Re: how would I write this complex ip tables rule

Re: how would I write this complex ip tables rule

Date Prev

Date Next

Thread Prev

Thread Next

Date Index

Thread Index

To: fedora-list@xxxxxxxxxx

Subject: Re: how would I write this complex ip tables rule

From: Bevan Bennett <bevan@xxxxxxxxxxxxxxxx>

Date: Mon, 12 Jan 2004 08:21:23 -0800

In-reply-to: <[email protected]>

References: <[email protected]>

Reply-to: fedora-list@xxxxxxxxxx

Sender: fedora-list-admin@xxxxxxxxxx

User-agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.3) Gecko/20030314

Technical wrote:

i want any to access my web server;
i want no one from idiot.com except joe.idiot.com and mary.idiot to access
my web server... thanks

For something this specific, you might be better off telling iptables to let in all traffic for port 80, then configuring your web server (apache I presume) to set who can access what from where.

I believe that would go something like this in the relevant bits of httpd.conf.

SetOrder Allow,Deny
    Allow from joe.idiot.com
    Allow from mary.idiot.com
    Deny from idiot.com
    Allow from all

By putting this in the webserver config rather than the firewall config, you'll be keeping everything 'non-standard' in one place instead of two, making it less likely that you'll forget about your changes later.