<div>I have researched an iptables option and would like to apply it to my global restrictions:</div> <div> </div> <div>iptables -A FORWARD -m iprange --dst-range 1.1.1.1-1.1.1.253 -j DROP</div> <div> (GLOBAL?)</div> <div> </div> <div>The ip range is fictitious in the example.</div> <div> </div> <div>John Boushall</div> <div><BR><BR><B><I>Benoit Grégoire <bock@step.polymtl.ca></I></B> wrote:</div> <BLOCKQUOTE class=replbq style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #1010ff 2px solid">On Wednesday 17 January 2007 15:18, Max Horváth wrote:<BR>> You can use the standard iptables command set ...<BR>><BR>> If you wanna restrict the access to every user of the node, just do<BR>> it on the router directly.<BR>><BR>> If you wanna restrict the access to a specific user class, add your<BR>> iptables command to the file fw_iptables.c
in function<BR>> iptables_load_ruleset() and add the rulesets like that:<BR>> iptables_do_command("-t filter -I " TABLE_WIFIDOG_WIFI_TO_INTERNET "<BR>> 1 -o interface DO WHATEVER");<BR><BR>You can normally do that from the wifidog config file.<BR><BR>-- <BR>Benoit Grégoire<BR>Technologies Coeus inc.<BR>_______________________________________________<BR>WiFiDog mailing list<BR>WiFiDog@listes.ilesansfil.org<BR>http://listes.ilesansfil.org/cgi-bin/mailman/listinfo/wifidog</BLOCKQUOTE><BR><p> 
<hr size=1>It's here! Your new message!<br>Get
<a href="http://us.rd.yahoo.com/evt=49938/*http://tools.search.yahoo.com/toolbar/features/mail/"> new email alerts</a> with the free <a href="
http://us.rd.yahoo.com/evt=49938/*http://tools.search.yahoo.com/toolbar/features/mail/">Yahoo! Toolbar.</a>