Generic Matches

• -s – Source Address – assumed a host unless a subnet mask is specified

  • Mask may be specified as bits or dotted decimal
  • iptables -R FORWARD 5 -s 172.16.0.0/255.240.0.0
  • iptables -A INPUT -s 192.168.0.0/16 -j VPNChain

• -d – Destination Address – same rules apply

Notes: