6

IPTABLES to block all outgoing connections except selected networks

view full story
linux-howto

http://unix.stackexchange.com – There is a firewall/gateway machine with eth0 Public and eth1 Private network (192.168.1.0). I would like to block all OUTPUT connections for private users (eth1) except couple of networks like: 123.123.123.0/24, 91.12.31.0/24 etc. as they are in our city network. There are a lot of questions here about iptables but I couldn't find a way to resolve this issue. It might also happen that some user, say, 192.168.1.10 would not be restricted to those networks. If I do: IPTABLES -P OUTPUT DROP IPTABLES -A OUTPUT -d 123.123.123.0/24 -s 192.168.1.51 -j ACCEPT ...that would make me adding rules p (HowTos)