All of lore.kernel.org
 help / color / mirror / Atom feed
From: Kevin Mulcahy <k.mulcahy@galleryglobalnetworks.com>
To: netfilter@lists.netfilter.org
Subject: OUTPUT ACCEPT, but can't see out
Date: Thu, 04 Mar 2004 12:11:15 +1100	[thread overview]
Message-ID: <40468233.1040702@galleryglobalnetworks.com> (raw)

Hi All
I have a very simple set of rules, with default policy for INPUT being 
DROP and  default OUTPUT being ACCEPT.
However, I can't hit anything on the outside.  I can't ping, ssh - nothing.
When I flush everything I can see outside no problem.
My script is:

IPTABLES="/sbin/iptables"
INTERFACE="eth0"
SERVER="x.x.x.x"
SSHA1="y.y.y.y"
$IPTABLES -P INPUT DROP
$IPTABLES -P OUTPUT ACCEPT
$IPTABLES -P FORWARD DROP
$IPTABLES -A INPUT -i $INTERFACE -p tcp -s $SSHA1 -d $SERVER --dport 22 
-j ACCEPT
$IPTABLES -A INPUT -i $INTERFACE -p tcp -s $ALLIP -d $ALLIP --dport 80 
-j ACCEPT
$IPTABLES -A INPUT -i $INTERFACE -p tcp -s $ALLIP -d $ALLIP --dport 443 
-j ACCEPT
$IPTABLES -A INPUT -i $INTERFACE -p ALL -m state --state 
ESTABLISHED,RELATED -j ACCEPT
#Note - this appears to generate an error
# iptables: No chain/target/match by that name
# but would that affect OUTPUT ???
$IPTABLES -A INPUT -i $INTERFACE -p ALL -j RETURN

$IPTABLES -A OUTPUT -o $INTERFACE -p ALL  -j ACCEPT


Cheers
Kev.


             reply	other threads:[~2004-03-04  1:11 UTC|newest]

Thread overview: 5+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2004-03-04  1:11 Kevin Mulcahy [this message]
2004-03-04  1:23 ` OUTPUT ACCEPT, but can't see out Unknown, Alistair Tonner
     [not found] ` <200403032023.35644.Alistair Tonner <>
2004-03-04  2:06   ` Kevin Mulcahy
2004-03-04 13:03     ` Unknown, Alistair Tonner
     [not found]     ` <200403040803.56158.Alistair Tonner <>
2004-03-04 23:02       ` Kevin Mulcahy

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=40468233.1040702@galleryglobalnetworks.com \
    --to=k.mulcahy@galleryglobalnetworks.com \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.