lots of source ip & same dst port to one line??

Monty Ree chulmin2 at hotmail.com
Mon Oct 17 03:06:04 CEST 2005


Hello, all.

I know -mport and --src-range function at iptables.
But I have some rules like below.

which same dst ip and port but source ip is not like below.

iptables -A INPUT -p tcp -s 1.1.1.1 -d 10.10.10.10 --dport  25 -j ACCEPT
iptables -A INPUT -p tcp -s 20.20.1.1 -d 10.10.10.10 --dport  25 -j ACCEPT
iptables -A INPUT -p tcp -s 30.1.2.1 -d 10.10.10.10 --dport  25 -j ACCEPT
iptables -A INPUT -p tcp -s 40.11.3.10 -d 10.10.10.10 --dport  25 -j ACCEPT
iptables -A INPUT -p tcp -s 100.1.2.3 -d 10.10.10.10 --dport  25 -j ACCEPT
iptables -A INPUT -p tcp -s 211.3.4.5 -d 10.10.10.10 --dport  25 -j ACCEPT
..........

This rule in not good for performance as I know.
So, is there any method which I can put together one line or rule??


Thanks in advance.

_________________________________________________________________
보다 빠르고 보기 편한 뉴스. 오늘의 화제는 MSN 뉴스에서 확인하세요.   
http://www.msn.co.kr/news/  




More information about the netfilter mailing list