Re: Denying TCP connections based on IP

[Larry Bolhuis <lbolhuis@xxxxxxxxxx>]

What you want is Packet Filters.

Open iNav then navigate down to Network -> IP Policies -> Packet Rules  
Rules can be places on any or all interfaces into your system.

There is an editor there and a wizard. Do not play here if you don't 
know IP addressing and subnet masks!!

But remember the 'Foghorn Leghorn' ("Fortunately I keep my feathers 
numbered for just such an Emergency!") command: RMVTCPTBL *ALL..  This 
is entered on the console when you activate a packet rule that 
disconnects all your iNav functions so that you can't fix them!  The 
command doesn't delete them simply de-activates them so you can get back 
in and fix them.  Don't ask how I know this command. :-)

  - Larry

Diana Hicks wrote:
> We have a firewall but I would like to add another layer of security to our 
> system (AS/400, iSeries, i5, System i, etc.).  I would like to specify a couple 
> of IP ranges on the system and only allow connections from those addresses.  
> Any other IP address that attempts to connect to the system would be denied.  
> This would be at the interface level and include all services since our system 
> is not on the internet.  All suggestions will be appreciated.
>
> Thanks.
>
> --
> Diana Hicks