关于同一IP段代理的问题!!!!达人帮忙!!!

shanjinqi

我想封掉10.10.16.38和10.10.16.41段(我也在同一个段上:10.10.16.36),现在的iptables如下:
# Generated by iptables-save v1.2.8 on Wed Dec  1 12:30:39 2004
*mangle
REROUTING ACCEPT [1049041]
:INPUT ACCEPT [98678]
:FORWARD ACCEPT [950078]
:OUTPUT ACCEPT [50315]
OSTROUTING ACCEPT [783258]
COMMIT
# Completed on Wed Dec  1 12:30:39 2004
# Generated by iptables-save v1.2.8 on Wed Dec  1 12:30:39 2004
*nat
REROUTING ACCEPT [616878]
OSTROUTING ACCEPT [26]
:OUTPUT ACCEPT [1010]
-A PREROUTING -s 192.168.0.0/255.255.255.0 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A POSTROUTING -o eth0 -j SNAT --to-source 10.10.16.36
COMMIT
# Completed on Wed Dec  1 12:30:39 2004
# Generated by iptables-save v1.2.8 on Wed Dec  1 12:30:39 2004
*filter
:INPUT ACCEPT [3868]
:FORWARD ACCEPT [24898]
:OUTPUT ACCEPT [1757]
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -s 10.10.16.41 -j DROP
-A INPUT -s 10.10.16.38 -j DROP
-A FORWARD -s 10.10.16.41 -j DROP
-A FORWARD -s 10.10.16.38 -j DROP
COMMIT
# Completed on Wed Dec  1 12:30:39 2004

不知道这样写对不对,我测试了,好像没起作用,10.10.16.38和10.10.16.41依然可以在他们的网关里写上我的IP,然后上网!!!!!怎么才能封掉那两个IP?????

shanjinqi

感谢楼上！！！！！我回去试试
不过应该写在什么格式的文件下呢？？？

lirongwei

建立静态IP/MAC捆绑的方法是：建立/etc/ethers文件，其中包含正确的IP/MAC对应关系，格式如下：
192.168.2.32 08:00:4E:B0:24:47
然后再/etc/rc.d/rc.local最后添加：
arp -f
即可

lirongwei

http://it.dg.gd.cn/article.php/259

shanjinqi

写上了，多谢各位关注

shanjinqi

没人跟呀!!!
不是我 写得太幼稚了吧?????