[plug] blocking user from accessing the Internet

[Matt Kemner]

Hi Jon

On Fri, 31 Aug 2007, quoth Jon Miller:

> Client wishes to have a certain user from accessing the Internet.  We use
> iptables, I used the following and still they can access the Internet what
> have I not done?

> Iptables - A INPUT -s 192.168.1.69 -p tcp all -j DROP (I also tried REJECT)
> neither worked.

You will no doubt get several responses to this, but...

use FORWARD instead of INPUT

INPUT and OUTPUT only affect traffic directly flowing in and out of the
firewall server itself.  FORWARD affects all traffic flowing through it.

Also (and this is probably a typo only in this email) you have a space
between "-" and "A" that should not be there

ie "iptables -A" not "iptables - A"

Kind Regards,

 - Matt Kemner           Perth:     Tel 08 9322 3444 Fax 08 9221 3444
  Penguin Care           Adelaide:  Tel 08 8311 1144 Fax 08 8311 1177
  Specialising in        Melbourne: Tel 03 8648 6644 Fax 03 8648 6677
  Linux & Business VoIP  Sydney:    Tel 02 8580 4488 Fax 02 8580 4477
  Mobile: 04 2022 3444   Brisbane:  Tel 07 3337 9988 Fax 07 3337 9977