Howto set an IP address range into rules of iptables

I tried the following instructions:

iptables -A FORWARD -s 192.168.0.200-192.168.0.240 -d 0/0 -p tcp -j ACCEPT
iptables -A FORWARD -s 192.168.0.200-192.168.0.240 -d 0/0 -p udp -j ACCEPT
iptables -A FORWARD -s 0/0 -d 192.168.0.200-192.168.0.240 -p tcp -j ACCEPT
iptables -A FORWARD -s 0/0 -d 192.168.0.200-192.168.0.240 -p udp -j ACCEPT

It appears error. Error message is:

iptables v1.2.5: host/network `192.168.0.200-192.168.0.240' not found
Try `iptables -h' or 'iptables --help' for more information.

Would you tell me how to set an IP address range into rules of iptables?
Thank you very much!

Terry Ho wrote:

> iptables -A FORWARD -s 192.168.0.200-192.168.0.240 -d 0/0 -p tcp -j ACCEPT
> iptables -A FORWARD -s 192.168.0.200-192.168.0.240 -d 0/0 -p udp -j ACCEPT
> iptables -A FORWARD -s 0/0 -d 192.168.0.200-192.168.0.240 -p tcp -j ACCEPT
> iptables -A FORWARD -s 0/0 -d 192.168.0.200-192.168.0.240 -p udp -j ACCEPT

You need to specify using the address/mask format

try
192.168.0.200/29 (for 200 - 207)
192.168.0.208/28 (for 208 - 223)
192.168.0.224/28 (for 224 - 239)
192.168.0.240/32 (for 240 - 240)

So each of your lines above will result in 4 lines -- one for each of the
above address/mask combinations

-- Saikat

Thank you very much! But I have one question.
You wrote:
> 192.168.0.200/29 (for 200 - 207)
> 192.168.0.208/28 (for 208 - 223)
> 192.168.0.224/28 (for 224 - 239)
> 192.168.0.240/32 (for 240 - 240)

I understand
> 192.168.0.200/29 (for 200 - 207)
> 192.168.0.208/28 (for 208 - 223)
> 192.168.0.240/32 (for 240 - 240)

But I don't understand
> 192.168.0.224/28 (for 224 - 239)
Why use network mask 28 bits? I think the network mask is 27 bits. Is it
right? ^-^

"Saikat Guha" <(E-Mail Removed)>
??????:bick74$jsg$(E-Mail Removed)...
> Terry Ho wrote:
>
> > iptables -A FORWARD -s 192.168.0.200-192.168.0.240 -d 0/0 -p tcp -j
ACCEPT
> > iptables -A FORWARD -s 192.168.0.200-192.168.0.240 -d 0/0 -p udp -j
ACCEPT
> > iptables -A FORWARD -s 0/0 -d 192.168.0.200-192.168.0.240 -p tcp -j
ACCEPT
> > iptables -A FORWARD -s 0/0 -d 192.168.0.200-192.168.0.240 -p udp -j
ACCEPT
>
> You need to specify using the address/mask format
>
> try
> 192.168.0.200/29 (for 200 - 207)
> 192.168.0.208/28 (for 208 - 223)
> 192.168.0.224/28 (for 224 - 239)
> 192.168.0.240/32 (for 240 - 240)
>
> So each of your lines above will result in 4 lines -- one for each of the
> above address/mask combinations
>
> -- Saikat