DreamCat 发表于 2005-4-24 10:46:21

http://www.vortech.net/phorums/read.php?8,46813

QUOTE


QUOTE
p2p blocking exceptionPosted by: lex (---.PNeT.Ro)Date: April 14, 2005 05:36PMi want to exclude an ip from p2p blocking rule...how can i do it ?


QUOTE
Re: p2p blocking exceptionPosted by: Claudio Roberto Cussuol (---.user.veloxzone.com.br)Date: April 16, 2005 02:19PMIf you want to allow just one ip you can write your rule like this: iptables -t mangle -A POSTROUTING -s ! 192.168.0.10 -m layer7 --l7proto fasttrack -j DROP (! = not) But if you have more than one ip you need to allow them and then block the remaining people, like this: iptables -t mangle -A POSTROUTING -s 192.168.0.10 -m layer7 --l7proto fasttrack -j ACCEPT iptables -t mangle -A POSTROUTING -s 192.168.0.11 -m layer7 --l7proto fasttrack -j ACCEPT iptables -t mangle -A POSTROUTING -s 192.168.0.12 -m layer7 --l7proto fasttrack -j ACCEPT iptables -t mangle -A POSTROUTING -m layer7 --l7proto fasttrack -j DROP
页: [1]
查看完整版本: p2p blocking exception