Re: complement of an IP address range rejected by iptables in F14

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thu, 2011-01-13 at 17:30 -0700, dave perry wrote:
> Using intrapositioned negation (`--option ! this`) is deprecated in 
> favor of extrapositioned (`! --option this`).
>  
> Am I interpreting this change correctly to think that the following
> line,
>  
> /sbin/iptables -A FORWARD ! -s 192.168.1.0/24 -j DROP
>  
> will drop all packet not sourced from the LAN with addresses
> 192.168.1.* 
> where * is any number from 1 to 255?

I'd make a special test rule, and test it...  Then I'd know.

-- 
[tim@localhost ~]$ uname -r
2.6.27.25-78.2.56.fc9.i686

Don't send private replies to my address, the mailbox is ignored.  I
read messages from the public lists.



-- 
users mailing list
users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


[Index of Archives]     [Current Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux