IPTables question


 
Thread Tools Search this Thread
Special Forums IP Networking IPTables question
# 1  
Old 02-20-2011
IPTables question

Hope someone can help cus m really stuck.
Im pretty good at making basic IPTables rules to get what i need done, but this one has me beat.

I have only 1 Nic in my linux box , and its setup as a trunk to my switch.
I have 5 vlans setup on it:

eth0.1000
eth0.1001
eth0.1002
eth0.1003
eth0.1004

I can get it to route between the vlans without trouble using a simple
-A INPUT -i eth0.1000 -j ALLOW
-A INPUT -i eth0.1001 -j ALLOW
-A INPUT -i eth0.1002 -j ALLOW
......ect
With forward, input and output set to accept.

Now if I ssh to any machine on any Vlan it routes between them perfectly.

PROBLEM IS:

Reversing the accept to drop and lock down the routes to just allow SSH.
If tried things like -A FORWARD -i eth0.1000 -o eth0.1001 ect and I cant get it to allow ssh from and to my separate vlans.

Can anyone help, all i want is a basic iptables to allow ssh from any machine on any vlan to any machine on any vlan, but block everything else.

Thanks for ANY advice.

Steve
Login or Register to Ask a Question

Previous Thread | Next Thread

8 More Discussions You Might Find Interesting

1. UNIX for Advanced & Expert Users

Multi-table iptables Question

I have a question regarding IPTables packet flow, that I am hoping I can get an answer to. We have a fairly advanced implementation of IPTables that I am trying to convert into a third party product and I am not quite certain on the packet flow in the current IPTables implementation. We are... (2 Replies)
Discussion started by: knightfirefx
2 Replies

2. IP Networking

iptables question

I have two programs, a datagram socket based sender and a datagram socket based receiver. The sender emits a short UDP message to 192.168.0.100:33333 every second. The receiver creates a datagram socket with a default port number (let's say it is 44444), clears the iptables adds the following rule:... (4 Replies)
Discussion started by: michaelrusse
4 Replies

3. Cybersecurity

iptables question.

I am setting up a new squid daemon to run on my server. I want to make sure that everyone inside my network can access squid but I want to make sure everyone on the internet is blocked. eth0 is connected to my internal LAN via: 192.168.0.5/255.255.255.0 eth1 is connected to the internet via:... (1 Reply)
Discussion started by: nondescriptciti
1 Replies

4. UNIX for Dummies Questions & Answers

help with iptables

Hi, On the IPTABLES, I did iptables --flush. I want to start fresh. Now I only want two things. Allow one ip address to this server. Allow port 443 as incoming from every where. Please advice how to do this. This is what I did so for. iptables -I INPUT -i eth0 -s 1.2.3.4 -j ACCEPT... (5 Replies)
Discussion started by: samnyc
5 Replies

5. IP Networking

Iptables

What should be the iptables rule so that only the subnet 64.61.11.224/255.255.255.248 may access the mysql port 3306 (1 Reply)
Discussion started by: proactiveaditya
1 Replies

6. IP Networking

Need help with iptables

Trying to create a whitelist to limit bandwidth. My sync speed is 1536/256 kbps. Simple rules in order: 1. Do not limit (or set to 1536/256) MAC 00:00:00:00:00 (computer is in 192.168.1.0/24). 2. Do not limit (or set to 1536/256) MAC 00:00:00:00:01 (computer is in 192.168.1.0/24). 3. Do not... (1 Reply)
Discussion started by: kripz
1 Replies

7. Linux

iptables question need help

Description i used iptables firewall is a month,running is favorable.it is failed when i connecting to my server on time.the servers' web service and all ports did not connect.i remote login the other server and through intranet address login this server then i restart iptables .but through... (0 Replies)
Discussion started by: proceed
0 Replies

8. IP Networking

IPtables

Hey guys, I have just started using IP tables and was wondering if anyone could direct me to any good online resources as I am totally new to this. Thanks. (1 Reply)
Discussion started by: 182x
1 Replies
Login or Register to Ask a Question
SVK::Command::Branch(3) 				User Contributed Perl Documentation				   SVK::Command::Branch(3)

NAME
SVK::Command::Branch - Manage a project with its branches SYNOPSIS
branch --create BRANCH [DEPOTPATH] branch --list [--all] branch --create BRANCH [--tag] [--local] [--switch-to] [--from|--from-tag BRANCH|TAG] [DEPOTPATH] branch --move BRANCH1 BRANCH2 branch --merge BRANCH1 BRANCH2 ... TARGET branch --checkout BRANCH [PATH] [DEPOTPATH] branch --delete BRANCH1 BRANCH2 ... branch --setup DEPOTPATH branch --push [BRANCH] branch --pull [BRANCH] branch --offline [BRANCH] branch --online [BRANCH] OPTIONS
-l [--list] : list branches for this project --listprojects : list avaliable projects --create : create a new branch --tag : create in the tags directory --local : targets in local branch --delete [--rm|del]: delete BRANCH(s) --checkout [--co] : checkout BRANCH in current directory --switch-to : switch the current checkout to another branch (can be paired with --create) --merge : automatically merge all changes from BRANCH1, BRANCH2, etc, to TARGET --project : specify the target project name --push : move changes to wherever this branch was copied from --pull : sync changes from wherever this branch was copied from --setup : setup a project for a specified DEPOTPATH --from BRANCH : specify the source branch name --from-tag TAG : specify the source tag name -C [--check-only] : try a create, move or merge operation but make no changes -P [--patch] FILE : Write the patch between the branch and where it was copied from to FILE --export : used with --checkout to create a detached copy --offline : takes the current branch offline, making a copy under //local --online : takes the current branch online, pushing changes back to the mirror path, and then switches to the mirror DESCRIPTION
SVK provides tools to more easily manage your project's branching and merging, so long as you use the standard "trunk/, branches/, tags/" directory layout for your project or specifically tell SVK where your branches live. Usage (without projects) A very simple sample usage might be to checkout the trunk from a project you want to work on but don't have upstream commit rights for. This allows you to maintain a local branch and to send in patches. Assuming you have alread mirrored this repository to //mirror/Project svk co //mirror/Project/trunk or svk branch --co trunk //mirror/Project/ and then svk branch --offline You're now working in a local branch, make local commits and changes as you need to. If you want to bring in changes from your remote repository, you can pull them down svk branch --pull To see what changes you've made, you can create a patch between the local branch and the remote repository svk branch -P - --push If you have commit rights to the remote repository, you can also svk branch --push to send your changes. You can use svk branch's branching capability in this mode, but it will be much friendlier if you set up a project Usage (projects) To initialize a project in a repository, run the setup command svk branch --setup //mirror/Project If you have the standard trunk branches tags directories svk will offer them as the starting point. In fact, if you have trunk branches and tags directories, svk will try to use them without neeting --setup, but you won't be able to use the --project flag and will need to use depotpaths in commands. The rest of this documentation assumes you've set up a project called Example in //mirror/Project If you're in a working copy of svk where it can work out the Project name, you can leave off the --project flag from the examples below, but you can branch/tag/merge without having working copies Branching To check out the trunk, you can run svk branch --co trunk --project Example To create a branch for release engineering svk branch --create Exmaple-1.0-releng --project Example Since you have a checkout of trunk already, you can convert that cd trunk svk branch --switch-to Example-1.0-releng Or you can get a clean checkout svk branch --co Example-1.0-releng --project Example If changes are made on trunk and you wish to bring them down to the release engineering branch, you can do that with the branch merge command svk branch --merge trunk Example-1.0-releng If you're cautious, use the check flags first: svk branch -C --merge trunk Example-1.0-releng svk branch -P - --merge trunk Example-1.0-releng These will show you what svk wants to do. Lets say you want to add a feature to trunk but work on a branch so you don't inconvenience others who are working on trunk: svk branch --create Feature --project Example work on your feature, svk ci some changes svk branch --merge Feature trunk --project Example continue to bring down changes several ways svk branch --pull svk branch --merge trunk Feature svk branch --merge trunk . (if you're in a working copy of the branch) and then merge back more feature work as you need to To get rid of a branch when you're done with it svk branch --delete Feature --project Example To see all of your branches, you can do: svk branch --list --project Example Tagging If you've been working on your releng branch and are ready to cut a release, you can easily create a tag svk branch --tag --create 1.0rc1 --from Example-1.0-releng --project Example If you would like to check out this tag, use svk branch --tag --co 1.0rc1 --project Example Project Property Details SVK branch also provides another project loading mechanism by setting properties on root path. Current usable properties for SVK branch are 'svk:project:<projectName>:path-trunk' 'svk:project:<projectName>:path-branches' 'svk:project:<projectName>:path-tags' These properties are useful when you are not using the standard "trunk/, branches/, tags/" directory layout. For example, a mirrored depotpath '//mirror/projA' may have trunk in "/trunk/projA/" directory, branches in "/branches/projA", and have a standard "/tags" directory. Then by setting the following properties on root path of remote repository, it can use SVK branch to help manage the project: 'svk:project:projA:path-trunk => /trunk/projA' 'svk:project:projA:path-branches => /branches/projA' 'svk:project:projA:path-tags => /tags' Be sure to have all "path-trunk", "path-branches" and "path-tags" set at the same time. perl v5.10.0 2008-09-13 SVK::Command::Branch(3)