There is a firewall/gateway machine with eth0 Public and eth1 Private network (
I would like to block all OUTPUT connections for private users (eth1)
except couple of networks like:
220.127.116.11/24 etc. as they are in our city network.
There are a lot of questions here about iptables but I couldn't find a way to resolve this issue.
It might also happen that some user, say, 192.168.1.10 would not be restricted to those networks.
If I do:
IPTABLES -P OUTPUT DROP IPTABLES -A OUTPUT -d 18.104.22.168/24 -s 192.168.1.51 -j ACCEPT ...that would make me adding rules per user multiplied by number of networks
So is there any way to GROUP those city networks as well?