Very Computer

by **Jeff Ber** » Mon, 20 May 2002 14:32:09

I have written a script to setup my iptables and I only want to give certain
IP's from different networks access to my webserver. I forgot how to use a
variable to use a bunch of IP's... can you tell me how?

basically instead of this:

iptables -A INPUT -j ACCEPT -p tcp -i eth0 --dport www -s 209.7.7.7 \
-d 209.209.209.2
iptables -A INPUT -j ACCEPT -p tcp -i eth0 --dport www -s 124.8.8.8 \
-d 209.209.209.2
iptables -A INPUT -j ACCEPT -p tcp -i eth0 --dport www -s 63.9.9.9 \
-d 209.209.209.2
iptables -A INPUT -j ACCEPT -p tcp -i eth0 --dport www -s 12.5.5.5 \
-d 209.209.209.2

I'd rather do something like this:

MYWWW = [209.7.7.7, 124.8.8.8, 63.9.9.9, 12.5.5.5]
iptables -A INPUT -j ACCEPT -p tcp -i eth0 -dport www -s $MYWWW -d
209.209.209.2

but I don't have the syntax down yet.

Would you please correct my syntax?

Thanks,

Jeff

by **Luke Voge** » Mon, 20 May 2002 16:03:11

> I have written a script to setup my iptables and I only want to give certain
> IP's from different networks access to my webserver. I forgot how to use a
> variable to use a bunch of IP's... can you tell me how?

> basically instead of this:

> iptables -A INPUT -j ACCEPT -p tcp -i eth0 --dport www -s 209.7.7.7 \
> -d 209.209.209.2
> iptables -A INPUT -j ACCEPT -p tcp -i eth0 --dport www -s 124.8.8.8 \
> -d 209.209.209.2
> iptables -A INPUT -j ACCEPT -p tcp -i eth0 --dport www -s 63.9.9.9 \
> -d 209.209.209.2
> iptables -A INPUT -j ACCEPT -p tcp -i eth0 --dport www -s 12.5.5.5 \
> -d 209.209.209.2

> I'd rather do something like this:

> MYWWW = [209.7.7.7, 124.8.8.8, 63.9.9.9, 12.5.5.5]
> iptables -A INPUT -j ACCEPT -p tcp -i eth0 -dport www -s $MYWWW -d
> 209.209.209.2

> but I don't have the syntax down yet.

> Would you please correct my syntax?

> Thanks,

> Jeff

IP_LIST="209.7.7.7 124.8.8.8 63.9.9.9 12.5.5.5"

for IP in $IP_LIST; do
$IPTABLES -A INPUT -p tcp -i eth0 -s $IP \
-d 209.209.209.2 --dport www -j ACCEPT
done
--
Regards
Luke
------
Q: What does FAQ stand for?
A: We are Frequently Asked this Question, and we have no idea.
------
C.O.L.S FAQ - http://www.linuxsecurity.com/docs/colsfaq.html
Note: Remove NOSPAM from my return address if necessary
------

by **William Par** » Mon, 20 May 2002 23:58:00

> I have written a script to setup my iptables and I only want to give certain
> IP's from different networks access to my webserver. I forgot how to use a
> variable to use a bunch of IP's... can you tell me how?

> basically instead of this:

> iptables -A INPUT -j ACCEPT -p tcp -i eth0 --dport www -s 209.7.7.7 \
> -d 209.209.209.2
> iptables -A INPUT -j ACCEPT -p tcp -i eth0 --dport www -s 124.8.8.8 \
> -d 209.209.209.2
> iptables -A INPUT -j ACCEPT -p tcp -i eth0 --dport www -s 63.9.9.9 \
> -d 209.209.209.2
> iptables -A INPUT -j ACCEPT -p tcp -i eth0 --dport www -s 12.5.5.5 \
> -d 209.209.209.2

> I'd rather do something like this:

> MYWWW = [209.7.7.7, 124.8.8.8, 63.9.9.9, 12.5.5.5]
> iptables -A INPUT -j ACCEPT -p tcp -i eth0 -dport www -s $MYWWW -d
> 209.209.209.2

> but I don't have the syntax down yet.

> Would you please correct my syntax?

> Thanks,

> Jeff

You have to list the rules one by one, ie.

for ip in 209.7.7.7 124.8.8.8 63.9.9.9 12.5.5.5 ; do
iptables -A INPUT -j ACCEPT -p tcp -i eth0 --dport www -s $ip -d 209.209.209.2
done

--

8-CPU Cluster, Hosting, NAS, Linux, LaTeX, python, vim, mutt, tin

by **Jeff Ber** » Tue, 21 May 2002 01:07:42

> IP_LIST="209.7.7.7 124.8.8.8 63.9.9.9 12.5.5.5"

> for IP in $IP_LIST; do
> $IPTABLES -A INPUT -p tcp -i eth0 -s $IP \
> -d 209.209.209.2 --dport www -j ACCEPT
> done
> --
> Regards
> Luke

Thanks. that was it.

Jeff

by **macefin** » Tue, 21 May 2002 03:14:34

Wanna try ippool from patch-o-matic?:)

>> IP_LIST="209.7.7.7 124.8.8.8 63.9.9.9 12.5.5.5"

>> for IP in $IP_LIST; do
>> $IPTABLES -A INPUT -p tcp -i eth0 -s $IP \
>> -d 209.209.209.2 --dport www -j ACCEPT
>> done
>> --
>> Regards
>> Luke

>Thanks. that was it.

>Jeff

Very Computer

IP tables script, multiple IP's ?

IP tables script, multiple IP's ?

IP tables script, multiple IP's ?

IP tables script, multiple IP's ?

IP tables script, multiple IP's ?

IP tables script, multiple IP's ?