iptables can use a range of IP address.
I have tested with iptables version 1.3.7 with Linux Kernel version 2.6.21-7.
Range specification depends on "iprange" module of iptables.
To specify a range of source IP address with iptables, use the following syntax,
# iptables -A INPUT -p tcp -m iprange --src-range 192.168.2.2-192.168.2.50 -j ACCEPT
To specify a range of destinationIP address with iptables, use the following syntax,
# iptables -A INPUT -p tcp -m iprange --dst-range 192.168.2.51-192.168.2.100 -j DROP
Showing posts with label Linux Security. Show all posts
Showing posts with label Linux Security. Show all posts
Tuesday, June 2, 2009
ip range with ipables | specify source ip range in iptables | specify destination ip range in iptables
Labels:
Fedora,
Firewall,
iptables,
Linux Security
Saturday, May 16, 2009
What is SELinux
History: SELinux was originally a development project from the National Security Agency (NSA) more..
Security-enhanced Linux (SELinux) is an implementation of a mandatory access control mechanism. This mechanism is in the Linux kernel, checking for allowed operations after standard Linux discretionary access controls are checked. more.....
SELinux Architecture: more....
Labels:
Fedora,
Linux Security
Enable or Disable SELinux on Linux/Fedora
In Fedora Core and RedHat Enterprise Linux one can Permanently Disable of Enable SELinux.
Edit the file /etc/selinux/config
then set: SELINUX=disabled
and then reboot the system!!
Labels:
Fedora,
Linux Security
Subscribe to:
Posts (Atom)