IPTables - TechRepublic
General discussion
August 3, 2001 at 05:36 PM
ppuru

IPTables

by ppuru . Updated 24 years, 10 months ago

I need to optimize my IPTable filtering rules.

Please suggest whether the rule

iptables -t nat -A PREROUTING -i eth0 -s 172.16.0.0/12 -j DROP

will deal with spoofed packets better than

iptables -t filter -A INPUT -i eth0 -s 172.16.0.0/12-j DROP

Also, are these rules necessary when I have already enabled rp_filter at kernel level?

TIA

Prakash

This discussion is locked

All Comments