•/usr/sbin $
iptables -L -t mangle -v -n
•Chain PREROUTING
(policy ACCEPT 29657 packets, 4902K bytes)
• pkts bytes
target prot opt
in out source
destination
•
•Chain INPUT
(policy ACCEPT 25826 packets, 4700K bytes)
• pkts bytes
target prot opt
in out source
destination
• 38 5855 IP_FILTER all --
*
*
0.0.0.0/0
0.0.0.0/0
•
•Chain FORWARD
(policy ACCEPT 0 packets, 0 bytes)
• pkts bytes
target prot opt
in out source
destination
•
•Chain OUTPUT
(policy ACCEPT 56509 packets, 66M bytes)
• pkts bytes
target prot opt
in out source
destination
•
•Chain POSTROUTING
(policy ACCEPT 56509 packets, 66M bytes)
• pkts bytes
target prot opt
in out source
destination
•
•Chain IP_FILTER (1
references)
• pkts bytes
target prot opt
in out source
destination
• 4 373 MARK all --
*
*
172.16.3.72
0.0.0.0/0
MARK or 0x1
• 4 373 DROP all --
*
*
0.0.0.0/0
0.0.0.0/0
MARK match 0x1/0x1
•
•From now on,
172.16.3.72 will NEVER EVER able
to connect !!