Page 1 of 1

Deny and Allow

Posted: 24 Apr 2007, 03:13
by jimbo
I read in another thread that the IP Allow overrides the IP Deny. I had a range of IP addresses in the IP DENY and a single IP address in the ALLOW. The single IP was still denied.

Example

DENY FILE

[INDENT]26.132.12.0/24 # Deny[/INDENT]
ALLOW FILE

[INDENT]d=1111:s=26.132.12.200 # Allow[/INDENT]

The IP 26.132.12.200 was still not able to log in until I removed the deny entry.

Posted: 25 Apr 2007, 10:18
by chirpy
Do the following and check which IP comes first, the ALLOW or the DENY:

iptables -L INPUT -n | more

Posted: 02 May 2007, 14:00
by jimbo
Chripy,

The ACCEPT with the IP is listed above the DROP with the range.