How can I restrict access (by IP) to devices behind my Edge Router?

I have a Ubiquiti ERPro-8 with some servers behind it. I would like to allow access to those servers, on specific ports. But I would like to restrict access to those servers by IP address.

For example:

Allow access to 10.0.1.40:8080 from 123.456.789.1/32.

Is this possible?

0
задан 11 October 2017 в 08:03
1 ответ

Это можно легко сделать с помощью настройки iptables на каждом из ваших серверов. Что-то вроде

iptables -J INPUT DROP
iptables -A INPUT -s 10.0.0.0/8 -j ACCEPT
iptables -A INPUT -s 123.456.789.1 -j ACCEPT
0
ответ дан 5 December 2019 в 07:24