problem in ip tables

[alvi]

i have very simple question
i am using linux and open the NAT
as

echo '1' > /proc/sys/net/ipv4/ip_forward
/sbin/iptables -P FORWARD ACCEPT
/sbin/iptables -t nat -A POSTROUTING -p all -s 192.168.0.0/255.255.255.0 -d 0.0.0.0/0 -j MASQUERADE

now i want only 192.168.0.1 to 192.168.0.200 user can access the internet other not
and second thing is that i want to block sites like kazaa.com and so on . how can i do this on iptables . i don't want to use proxy server because through this is can't open the voice chat as well as sms sites. is there any way to do this job
send reply on this address
m_alvi82@hotmail.com

[adam7979]

googling for block kazaa iptables returns:

http://groups-beta.google.com/group/...48352a80b661d0

(i learn something new today!! )

To allow FROM .1 to .200 (or to block .201 to .254) chop your ip into something like 192.168.0.224/27 and disallow it. This would effectively block ip from 192.168.0.224 to 192.168.0.254 from passing thru your firewall..


good luck