On Wednesday 27 February 2008 03:19:56 Andika Triwidada wrote:
> Apa yang diharapkan dilakukan kalau source 10.8.9.153?
> Kalau rule ini disisipkan, apakah cocok?
>
> iptables -t nat -I PREROUTING -i eth3 -p tcp -s 10.8.9.153 -d 0/0 \
>  --dport 80 -j RETURN

Cocok, tergantung default policy:
If the packet hit a --jump RETURN rule in the chain. It would then be dropped 
to the default policy as previously described, and no more actions would be 
taken in this chain.

Mendingan sekalian di REJECT aja.
Masukkan rulenya ini di sebelum rule yg di email awal.
iptables -t nat -I PREROUTING -i eth3 -p tcp -s 10.8.9.153 -d 0/0 \
--dport 80 -j REJECT

CMIIW,
-- 
Fajar Priyanto | Reg'd Linux User #327841 | Linux tutorial 
http://linux2.arinet.org
08:23:14 up 46 min, 2.6.22-14-generic GNU/Linux 
Let's use OpenOffice. http://www.openoffice.org
The real challenge of teaching is getting your students motivated to learn.

Attachment: signature.asc
Description: This is a digitally signed message part.

Kirim email ke