How should I do IP filtering

[celine7822]

Hi,

I am trying to setup some IP filtering rules for my AIX 5.2 through the smitty screen.

I want to allow say IP 100.100.100.100 and 100.100.100.101 to have full access to all the ports but i want to deny access to all the other IPs.

Reason why i want to allow full access is because I have quite a list of ports to control and doing it for 2 and 3 IPs is really a hassle.

I tried doing it, permit IP, for example, 1.1.1.1, subnet mask 255.255.255.255 to all protocols, any destination port.

Also, deny IP of 0.0.0.0 (from my understanding 0.0.0.0 means all other IPs, am I correct?), subnet mask 0.0.0.0 to all protocols, any destination port.

When I did this, I was kicked out of the server even though i was connecting from 100.100.100.100. I need to know am I on the right track?

Awaiting your advise.

Regards,
Celine