특정IP대역을 Iptables로 막는 방법

==> 아래의 예를 참고로 설정후에 /etc/init.d/iptables restart [enter]하세요

#> vi /etc/sysconfig/iptables [enter]

---------------------------------------------------------------------------
*filter
:INPUT DROP [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:icmp_packets - [0:0]
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -s 127.0.0.1 -j ACCEPT
-A INPUT -s 192.168.0.0/24 -j ACCEPT
-A INPUT -s 10.88.0.0/24 -j ACCEPT
-A INPUT -s 10.88.174.103 -j ACCEPT
-A INPUT -s 10.88.163.204 -j ACCEPT
-A INPUT -s 10.88.174.34 -j ACCEPT
-A INPUT -s 10.88.174.35 -j ACCEPT
-A INPUT -s 10.88.174.36 -j ACCEPT
-A INPUT -p icmp -j icmp_packets
-A INPUT -j LOG --log-prefix "iptables-IN Default Drop: " --log-level 7
COMMIT

*mangle
:PREROUTING ACCEPT [164:15203]
:INPUT ACCEPT [164:15203]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [147:63028]
:POSTROUTING ACCEPT [147:63028]
COMMIT

*nat
:PREROUTING ACCEPT [14:672]
:POSTROUTING ACCEPT [9:684]
COMMIT