WINPE1 = 192.168.10.5 iptables -A INPUT -p tcp -s 192.168.10.5 --dport 80 -j ACCEPT iptables -A INPUT -p tcp --dport 80 -j DROP iptables -A INPUT -s 192.168.10.5 -p ICMP --icmp-type 8 -j ACCEPT iptables -A INPUT -p ICMP --icmp-type 8 -j DROP
I wrote these rules in response to these guidelines:
Only allow HTTPD traffic from WINPE1. Use an ACCEPT command. We are implementing a DROP policy.
Allow Ping traffic from WINPE1 only. Again, use an ACCEPT command.
However, in the guidelines it is stated that subnet addressing (like 220.127.116.11/24 for example) must be used throughout the firewall; no individual IP addresses allowed for source machines and no specified ranges allowed either e.g.,
How do I change the 192.168.10.5 address to CIDR notation without granting access to other IP addresses?