Jump to content

iptables should deny dial


Guest kaioo
 Share

Recommended Posts

Hi everybody :)

I am trying to teach my iptables to deny/drop every attemp of dialing which comes from a specific ip adress, so it should even let the connection begin to dial, clearly I want to prevent every dial from that IP as long as that rule exists. I tried first to DROP every packet for FORWARD for the tcp protocol which I assume is the usual Internet connections protocol, right? so I typed that in the console:

 

iptables -A FORWARD -p tcp -o ippp0 -j DROP

 

Then started Mozilla, but still the connection was dialing. Then I treid the same for OUTPUT:

 

iptables -A OUTPUT -p tcp -o ippp0 -j DROP

 

But still when I started Mozilla it was connecting, it wasn't sending packages out, and Mozilla wasn't able to connect to http://www.google.de or any other URL, but the connection is still dialing.. Do you know a way to stop that dialing?

ahh before I forget I typed that rule first, to allow all the other Clients to dial up:

 

iptables -t nat -A POSTROUTING -o ippp0 -j MASQUERADE

 

Thanks for any help very much in advance :)

Link to comment
Share on other sites

just to inform those who have the same problem:

 

iptables -A FORWARD -s x.x.x.x -j DROP

 

this command solves the problem :)

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

×
×
  • Create New...