The boxes vary from unix servers to voip gateways etc, so IPTABLES is not an option on each machine, what is required is a machine to funnel all acess into and out of the subnet these machines are on. -----Original Message----- From: fedora-list-bounces@xxxxxxxxxx [mailto:fedora-list-bounces@xxxxxxxxxx] On Behalf Of Mike Burger Sent: Tuesday, October 12, 2004 4:58 PM To: For users of Fedora Core releases Subject: Re: IP access restriction On Tue, 12 Oct 2004, Rick Lim wrote: > I have a friend that has a few boxes directly on the internet, which he > thinks are being access by unwanted "visitors". > > These machine still have to have routable IP address but should have limited > access from external IP subnets. > > > > What would be suitable for limiting IP subnet access to these address? > > Would a 'firewall' like machine with IPTABLES be able to accomplish this, > that is without changing the IP address passed through the 'firewallish' > machine? iptables, on the system in question, should be sufficient. -- Mike Burger http://www.bubbanfriends.org Visit the Dog Pound II BBS telnet://dogpound2.citadel.org or http://dogpound2.citadel.org To be notified of updates to the web site, visit http://www.bubbanfriends.org/mailman/listinfo/site-update, or send a message to: site-update-request@xxxxxxxxxxxxxxxxx with a message of: subscribe -- fedora-list mailing list fedora-list@xxxxxxxxxx To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list