From: "Jörg Harmuth" <harmuth@mnemon.de>
To: netfilter@lists.netfilter.org
Subject: Re: Rules for localhost, help needed.
Date: Tue, 26 Jul 2005 09:38:22 +0200 [thread overview]
Message-ID: <42E5E86E.80206@mnemon.de> (raw)
In-Reply-To: <B80488675062364A909EE60F4A66603807E15FDE@usilms23.ca.com>
Ginter, Jeff A schrieb:
> On occasion, I configure iptables via webmin. I am having a strange
> problem where when I apply the rules from that GUI that it never comes
> back. If I close the web browser and restart, I can see everything
> again, but it looks like I get cut off. Also, I occasionally get some
> redhat GUI issues as well and I think it's because of my rulebase.
> These issues do not happen when I am connected remotely.
>
>
>
> I have my ruleset below...am I missing anything for local that anyone
> can see.
...
> [root@mae-fw ~]# iptables -L
Please provide at least the output of "iptables -nvL", only -L isn't
enough. Or you may send the output of "iptables-save ...".
> Chain INPUT (policy DROP)
>
> target prot opt source destination
>
> DROP all -- 192.168.222.0/24 anywhere
>
> DROP all -- 138.42.156.0/24 anywhere
>
> ACCEPT all -- anywhere anywhere state
> RELATED,ESTABLISHED
>
> ACCEPT tcp -- anywhere anywhere tcp
> multiport dports ssh,10000 state NEW
>
> DROP all -- anywhere anywhere
Although no interfaces are shown, I can't see any rule, that could allow
lo. Seems to me that you are missing rules like these:
iptables -A INPUT -i lo -j ACCEPT
iptables -A OUTPUT -o lo -j ACCEPT
Have a nice time,
Joerg
prev parent reply other threads:[~2005-07-26 7:38 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2005-07-25 20:54 Rules for localhost, help needed Ginter, Jeff A
2005-07-26 7:38 ` Jörg Harmuth [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=42E5E86E.80206@mnemon.de \
--to=harmuth@mnemon.de \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.