<HTML><BODY style="word-wrap: break-word; -khtml-nbsp-mode: space; -khtml-line-break: after-white-space; ">You can use the standard iptables command set ...<DIV><BR class="khtml-block-placeholder"></DIV><DIV>If you wanna restrict the access to every user of the node, just do it on the router directly.</DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>If you wanna restrict the access to a specific user class, add your iptables command to the file fw_iptables.c in function iptables_load_ruleset() and add the rulesets like that:</DIV><DIV>iptables_do_command("-t filter -I " TABLE_WIFIDOG_WIFI_TO_INTERNET " 1 -o interface DO WHATEVER");</DIV><DIV><BR><DIV> <SPAN class="Apple-style-span" style="border-collapse: separate; border-spacing: 0px 0px; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-align: auto; -khtml-text-decorations-in-effect: none; text-indent: 0px; -apple-text-size-adjust: auto; text-transform: none; orphans: 2; white-space: normal; widows: 2; word-spacing: 0px; "><SPAN class="Apple-style-span" style="border-collapse: separate; border-spacing: 0px 0px; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-align: auto; -khtml-text-decorations-in-effect: none; text-indent: 0px; -apple-text-size-adjust: auto; text-transform: none; orphans: 2; white-space: normal; widows: 2; word-spacing: 0px; "><DIV>Cheers,</DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>-- </DIV><DIV>Max Horváth</DIV><DIV>Web developer</DIV></SPAN></SPAN></DIV><BR><DIV><DIV>On 16.01.2007, at 11:15, John Boushall wrote:</DIV><BR class="Apple-interchange-newline"><BLOCKQUOTE type="cite"><DIV>I need to exclude a range of IPs in the global rule set, but not the whole subnet. What is the syntax to do that task?</DIV> <DIV> </DIV> <DIV>John Boushall</DIV><DIV> <BR class="khtml-block-placeholder"></DIV><HR size="1">It's here! Your new message!<BR>Get <A href="http://us.rd.yahoo.com/evt=49938/*http://tools.search.yahoo.com/toolbar/features/mail/"> new email alerts</A> with the free <A href=" http://us.rd.yahoo.com/evt=49938/*http://tools.search.yahoo.com/toolbar/features/mail/">Yahoo! Toolbar.</A><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">_______________________________________________</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">WiFiDog mailing list</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><A href="mailto:WiFiDog@listes.ilesansfil.org">WiFiDog@listes.ilesansfil.org</A></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><A href="http://listes.ilesansfil.org/cgi-bin/mailman/listinfo/wifidog">http://listes.ilesansfil.org/cgi-bin/mailman/listinfo/wifidog</A></DIV> </BLOCKQUOTE></DIV><BR></DIV></BODY></HTML>