On Mon, Feb 09, 2009 at 11:09:34AM +0000, Geraint Lee wrote:
> what about something along the lines of...
>
> iptables -A INPUT -p udp --dport 5060 -j DROP
> iptables -A INPUT -p udp -s 192.168.0.0/24 --dport 5060 -j ACCEPT
> iptables -A INPUT -p udp -s 10.0.0.0/8 --dport 5060 -j ACCEPT
> iptables -A INPUT -p udp -s 66.66.66.66 --dport 5060 -j ACCEPT
Err... I guess you meant:
iptables -A INPUT -p udp -s 192.168.0.0/24 --dport 5060 -j ACCEPT
iptables -A INPUT -p udp -s 10.0.0.0/8 --dport 5060 -j ACCEPT
iptables -A INPUT -p udp -s 66.66.66.66 --dport 5060 -j ACCEPT
# only if previous three did not match:
iptables -A INPUT -p udp --dport 5060 -j DROP
--
Tzafrir Cohen
icq#16849755 jabber:tzafrir.co...@xorcom.com
+972-50-7952406 mailto:tzafrir.co...@xorcom.com
http://www.xorcom.com iax:gu...@local.xorcom.com/tzafrir
_______________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-users
