Zugschlusbeobachtungen

To: netfilter@lists.netfilter.org
Subject: Limit access to one subnet?

I'm trying to figure out how to allow only 141.225.x.x to access port 8080 on a server.  It's a proxy server and obviously I don't want anyone outside of campus to be able to access it.

I mean, denying access to some service is the most basic function of a packet filter. How can anybody planning to deploy netfilter not know _this_?

Anyway, in this case, it would of course be the best solution to configure the service itself to only allow on-campus access. But, alas, one needs too read the docs for the proxy software in use to make this possible, eh?

Mailing lists of big and successful open source projects are these days flooded with clueless requests from newbies which obviously have not spent a second getting acquainted with the tool or with the basics of the underlying protocols. I'm going to publish some of the "best" of these messages in irregular intervals her, tagges with "best-of-mailing-list".

All articles tagged appropriately can be seen as blog entries. There is also an RSS feed.