Iptables bans those on the whitelist. How to fix?

Question

linux

there are ip in the whitelist, you need to deny access to everyone, EXCEPT for those who are in the whitelist
, I write like this:

sudo iptables -A INPUT -m set ! --match-set whitelist src -j DROP

the rule is processed without errors, but it bans on the contrary, all WHO in the whitelist
tried to put ! before white list - the rule throws an error

Answer 1

If you want to disable everything except whitelist, then first
DROP ALL
And then iptables -A INPUT -m set ! --match-set whitelist src -j ACCEPT
And what you are doing now is denying access to those who are in the whitelist (since the command is at the end of DROP)
Look / google manuals on this topic (first 3 links in Google by: iptables allow only whitelist)

Answer 2

-j ACCEPT probably if you want to allow rather than deny

Answer 3

iptables -A INPUT -m set --set whitelist src -j ACCEPT
iptables -A INPUT -j REJECT
do not use "!"