[rhn-users] what's best way to allow a part of ip range to ac cess lan server ?

[Strickler Carl]

You probably want to start here: 
http://www.netfilter.org/documentation/HOWTO//packet-filtering-HOWTO.html

You'll end up with a few rules that look like this 
iptables -N dhcpblock
iptables -A INPUT -i eth0 -j dhcpblock

iptables -A dhcpblock -s 192.168.x.192/26 -j REJECT
...

-----Original Message-----
From: rhn-users-bounces at redhat.com [mailto:rhn-users-bounces at redhat.com] On
Behalf Of FM
Sent: Wednesday, December 01, 2004 11:39 AM
To: Mailing List Redhat Network
Subject: [rhn-users] what's best way to allow a part of ip range to access
lan server ?


our stations have their IP with DHCP (using MAC address). 192.168.x.50 --
192.168.x.134


Other station (laptop from customer) received a ip from a range of :
192.168.x.135 -- 192.168.x.253

I'd like to disallow access from those stations to our lan server.

is host-allow the best way / easy way  ?

thanks !

_______________________________________________
rhn-users mailing list
rhn-users at redhat.com https://www.redhat.com/mailman/listinfo/rhn-users