<div>
Hi,<br />
<br />
Assume eth0 is LAN and eth1 is internet for your Linux box.<br />
As root<br />
# iptables -A INPUT -i eth0 -p tcp -s 192.168.0.80 -o eth1 -j DROP<br />
<br />
Wesly 
</div>


Hi,

Assume eth0 is LAN and eth1 is internet for your Linux box.
As root
# iptables -A INPUT -i eth0 -p tcp -s 192.168.0.80 -o eth1 -j DROP

Wesly

<div>
can't use -o with INPUT....
</div>


<div>
Oops,<br />
<br />
# iptables -A OUTPUT -p all -s 192.168.0.80 -o eth1 -j DROP<br />
---------<br />
Chain OUTPUT (policy ACCEPT)<br />
target &nbsp; &nbsp; prot opt source &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; destination &nbsp; &nbsp; &nbsp; &nbsp; <br />
DROP &nbsp; &nbsp; &nbsp; all &nbsp;-- &nbsp;192.168.0.80 &nbsp; &nbsp; &nbsp;anywhere &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br />
------------<br />
<br />
Wesly
</div>


Oops,

# iptables -A OUTPUT -p all -s 192.168.0.80 -o eth1 -j DROP
---------
Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination        
DROP       all  --  192.168.0.80      anywhere          
------------

Wesly

<div>
ok. that works to cut off all access, but i would like to maintain the ability to have email. Just close &nbsp;port 80 maybe???
</div>


ok. that works to cut off all access, but i would like to maintain the ability to have email. Just close  port 80 maybe???

<div>
# iptables -A OUTPUT -p tcp --ports 80 -s 192.168.0.80 -o eth1 -j DROP<br />
<br />
Wesly
</div>


# iptables -A OUTPUT -p tcp --ports 80 -s 192.168.0.80 -o eth1 -j DROP

Wesly

<div>
unknown error --ports<br />

</div>


<div>
<br />
iptables -A OUTPUT -p tcp --dport 80 -s 192.168.0.80 -o eth1 -j DROP<br />
<br />

</div>



iptables -A OUTPUT -p tcp --dport 80 -s 192.168.0.80 -o eth1 -j DROP



<div>
<div class="content wysiwyg-content">
hi experts.<br />
my linux box is sharing an internet connection to the rest of the office. <br />
I would like to restrict 192.168.0.80 only to intranet, no internet. thanks..
</div>
</div>


hi experts.
my linux box is sharing an internet connection to the rest of the office. 
I would like to restrict 192.168.0.80 only to intranet, no internet. thanks..

iptables help

The variety of Linux distributions creates myriad issues relating to configuration and operations when computers are networked, not the least of which is the use of various network management applications, some of which are included with specific distributions, while others are standalone applications.