All of lore.kernel.org
 help / color / mirror / Atom feed
From: "Jörg Harmuth" <harmuth@mnemon.de>
To: netfilter@lists.netfilter.org
Subject: Re: Rules for localhost, help needed.
Date: Tue, 26 Jul 2005 09:38:22 +0200	[thread overview]
Message-ID: <42E5E86E.80206@mnemon.de> (raw)
In-Reply-To: <B80488675062364A909EE60F4A66603807E15FDE@usilms23.ca.com>

Ginter, Jeff A schrieb:
> On occasion, I configure iptables via webmin.  I am having a strange
> problem where when I apply the rules from that GUI that it never comes
> back.  If I close the web browser and restart, I can see everything
> again, but it looks like I get cut off.  Also, I occasionally get some
> redhat GUI issues as well and I think it's because of my rulebase.
> These issues do not happen when I am connected remotely.
> 
>  
> 
> I have my ruleset below...am I missing anything for local that anyone
> can see.
...
> [root@mae-fw ~]# iptables -L

Please provide at least the output of "iptables -nvL", only -L isn't
enough. Or you may send the output of "iptables-save ...".

> Chain INPUT (policy DROP)
> 
> target     prot opt source               destination
> 
> DROP       all  --  192.168.222.0/24     anywhere
> 
> DROP       all  --  138.42.156.0/24      anywhere
> 
> ACCEPT     all  --  anywhere             anywhere            state
> RELATED,ESTABLISHED
> 
> ACCEPT     tcp  --  anywhere             anywhere            tcp
> multiport dports ssh,10000 state NEW
> 
> DROP       all  --  anywhere             anywhere

Although no interfaces are shown, I can't see any rule, that could allow
lo. Seems to me that you are missing rules like these:

iptables -A INPUT -i lo -j ACCEPT
iptables -A OUTPUT -o lo -j ACCEPT

Have a nice time,

Joerg



      reply	other threads:[~2005-07-26  7:38 UTC|newest]

Thread overview: 2+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2005-07-25 20:54 Rules for localhost, help needed Ginter, Jeff A
2005-07-26  7:38 ` Jörg Harmuth [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=42E5E86E.80206@mnemon.de \
    --to=harmuth@mnemon.de \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.