All of lore.kernel.org
 help / color / mirror / Atom feed
From: Kelly Setzer <Kelly.Setzer@placemark.com>
To: netfilter@lists.netfilter.org
Subject: Purpose of self-referential rule
Date: Mon, 24 Feb 2003 10:06:28 -0600	[thread overview]
Message-ID: <20030224160628.GH4316@placemark.com> (raw)

I've been experimenting with gShield trying to learn the ins and outs
of iptables.  One of the rules is generates is:

iptables -A INPUT -s 192.168.6.0/24 -d 192.168.6.0/24 -i eth1 -j ACCEPT

The source and dest are correct for my internal network, and eth1 is
the internal net.  My question is, when would the firewall ever see a
packet that could possible match this?  Any packet with a source and
destination on the same network would send the packet directly (no
routing, thus no firewall).

What am I missing?

thanks,
Kelly
--
Kelly Setzer, System Administrator/Architect - Placemark Investments
14180 Dallas Pkwy, Suite 200, Dallas, TX 75240
kelly.setzer@placemark.com  http://www.placemark.com
(972)404-8100x41 (work)       (214) 287-3464 (cell)


             reply	other threads:[~2003-02-24 16:06 UTC|newest]

Thread overview: 5+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2003-02-24 16:06 Kelly Setzer [this message]
2003-02-26 14:03 ` Purpose of self-referential rule Joel Newkirk
2003-02-26 14:55   ` Kelly Setzer
2003-02-26 15:33 ` Alistair Tonner
2003-02-26 17:52 ` Del Winiecki

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20030224160628.GH4316@placemark.com \
    --to=kelly.setzer@placemark.com \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.