Check out firewall builder also. It's a great GUI tool for building easy or complex firewall rules. http://www.fwbuilder.org > This should work (remember, iptables goes through all the filters/rules > one at a time, so once it's caught on one it doesn't go further down the > list - in this case, just make sure that you allow access to joe. and > mary. in rules ABOVE the rule denying access to the rest of idiot.com) > ... > iptables -A INPUT -s joe.idiot.com -m tcp -p tcp -tcp http -m state > --state NEW -j ACCEPT > iptables -A INPUT -s mary.idiot.com -m tcp -p tcp -tcp http -m state > --state NEW -j ACCEPT > iptables -A INPUT -s idiot.com -m tcp -p tcp -tcp http -m state --state > NEW -j DROP > > c. > > > > Technical wrote: >> i want any to access my web server; >> i want no one from idiot.com except joe.idiot.com and mary.idiot to >> access >> my web server... thanks >> >> > > > -- > fedora-list mailing list > fedora-list@xxxxxxxxxx > To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list >