On Sun, Aug 05, 2001 at 09:57:29PM -0700, Steve Jardine wrote:
>I find myself in need of using ipchains to block a whole section of ports. Lets
>say, 61000 to 61300. Can anyone offer up a chain script that could accomplish
>this task?

Just separate the low and high port number with colons.  This blocks
outgoing traffic on our router on the netbui ports 137-139.

ipchains -F wan_OUT
ipchains -A wan_OUT  -d 0.0.0.0/0 137:139 -p tcp -j REJECT -l
...

Bill
--
INTERNET:   [EMAIL PROTECTED]  Bill Campbell; Celestial Software LLC
UUCP:               camco!bill  PO Box 820; 6641 E. Mercer Way
FAX:            (206) 232-9186  Mercer Island, WA 98040-0820; (206) 236-1676
URL: http://www.celestial.com/

Cutting the space budget really restores my faith in humanity.  It
eliminates dreams, goals, and ideals and lets us get straight to the
business of hate, debauchery, and self-annihilation.
                -- Johnny Hart
_______________________________________________
http://linux.nf -- [EMAIL PROTECTED]
Archives, Subscribe, Unsubscribe, Digest, Etc 
->http://linux.nf/mailman/listinfo/linux-users

Reply via email to