You can use Vuurmuur or do it from the command line which I like to do.

First you should setup your own chain to whitelist.

The following examples are the most basic and most sparse, probably won't do
to well in production environments:

In the input chain, make sure to JUMP to your whitelist chain:


iptables -I INPUT -j WHITELIST

iptables -N WHITELIST
iptables -I WHITELIST -s <source net/host> <add additional args for port
restrictions if necessary> -j ACCEPT
iptables -A WHITELIST -j RETURN   # return to calling chain

iptables -A INPUT -j DROP # drop all other traffic

We actually use blacklist chains on one of our servers to blacklist entire
eastern european and asian blocks...

-DK

On Tue, Oct 19, 2010 at 6:29 PM, Roger E. Rustad, Jr. <
[email protected]> wrote:

> On Tue, Oct 19, 2010 at 12:57 PM, Dino K <[email protected]>wrote:
>
>> this is such a vague question, whitelist for what?  are you using a
>> firewall?  that's like asking if I carry tires for cars...
>
>
> Forgot to mention...whitelist for IP tables on a server.
>
> _______________________________________________
> LinuxUsers mailing list
> [email protected]
> http://socallinux.org/cgi-bin/mailman/listinfo/linuxusers
>
>
_______________________________________________
LinuxUsers mailing list
[email protected]
http://socallinux.org/cgi-bin/mailman/listinfo/linuxusers

Reply via email to