Deny and Allow

jimbo · Post by **jimbo** » 24 Apr 2007, 03:13

I read in another thread that the IP Allow overrides the IP Deny. I had a range of IP addresses in the IP DENY and a single IP address in the ALLOW. The single IP was still denied.

Example

DENY FILE

[INDENT]26.132.12.0/24 # Deny[/INDENT]
ALLOW FILE

[INDENT]d=1111:s=26.132.12.200 # Allow[/INDENT]

The IP 26.132.12.200 was still not able to log in until I removed the deny entry.

Post by **chirpy** » 25 Apr 2007, 10:18

Do the following and check which IP comes first, the ALLOW or the DENY:

iptables -L INPUT -n | more

jimbo · Post by **jimbo** » 02 May 2007, 14:00

Chripy,

The ACCEPT with the IP is listed above the DROP with the range.