Home / server / Questions / 481741
Accepted
Daniel Fischer
Asked: 2013-02-23 21:51:27 +0800 CST

How to allow specific ip's to connect to server?

  • 772

Trying to limit a staging server to a specific set of IP's that can access it. How would I do this for iptables or is there a better way to do it?

iptables

1 Answers

  1. Best Answer

    If you're going to have more than one or two servers, I'd make a new chain for your service. Set up a rule on the INPUT chain to jump to that new chain, set the default policy on the new chain to REJECT, and then just insert rules to ACCEPT when the source is any of the allowed machines.

    iptables -A INPUT (whatever criteria defines your service) -j newservice
iptables -X newservice # delete existing chain
iptables -N newservice # create new chain again
iptables -P newservice REJECT # set default policy
iptables -A newservice --src 192.168.0.1 -j ACCEPT
iptables -A newservice --src 192.168.0.2 -j ACCEPT

    You just run that last line over and over with additional IPs.

    • 4