All interface specifications being replaced by ANYWHERE

All interface specifications being replaced by ANYWHERE

[Grant Adamson]

Hi All,

I recently redid my home gateway/NAT box with debian 3.1, and everything
looked to be working fine until I did a quick scan on it from outside to
test the firewall. All the services running appeared to be exposed. Checking
my rules with iptables -L, I found that for some reason, everywhere I had
specified a physical interface, it had been replaced by ANYWHERE.

For example, the following rule:

iptables -A INPUT -m state --state NEW -i ! $EXTIF -j ACCEPT

Ends up appearing in the iptables -L list as:

target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere            state NEW


Needless to say, this doesn't make for a very good situation. Has anyone
ever seen a problem like this before? Any suggestions would be greatly
appreciated.

Thanks,
Grant

Re: All interface specifications being replaced by ANYWHERE

[myhapwcforever]

> For example, the following rule:
> 
> iptables -A INPUT -m state --state NEW -i ! $EXTIF -j ACCEPT
What is the value of EXTIF?
 
> Ends up appearing in the iptables -L list as:
> 
> target     prot opt source               destination
> ACCEPT     all  --  anywhere             anywhere            state NEW
I think you did not "-d" option. It may mean anywhere.
iptables -A INPUT -d $ALLOWIP -m state --state NEW -i ! $EXTIF -j ACCEPT
ok?

Re: All interface specifications being replaced by ANYWHERE

[Leonardo Rodrigues Magalhães]

Grant Adamson escreveu:

>Hi All,
>
>I recently redid my home gateway/NAT box with debian 3.1, and everything
>looked to be working fine until I did a quick scan on it from outside to
>test the firewall. All the services running appeared to be exposed. Checking
>my rules with iptables -L, I found that for some reason, everywhere I had
>specified a physical interface, it had been replaced by ANYWHERE.
>
>For example, the following rule:
>
>iptables -A INPUT -m state --state NEW -i ! $EXTIF -j ACCEPT
>
>Ends up appearing in the iptables -L list as:
>
>target     prot opt source               destination
>ACCEPT     all  --  anywhere             anywhere            state NEW
>
>  
>

    To see interfaces, you should use -v option on iptables. Interfaces 
do not show when you use -L alone.

    I always use iptables -nL TABLENAME -v (TABLENAME is optional).

    Please check your rules with:  iptables -nL INPUT -v

-- 


	Atenciosamente / Sincerily,
	Leonardo Rodrigues
	Solutti Tecnologia
	http://www.solutti.com.br

	Minha armadilha de SPAM, NÃO mandem email
	gertrudes@solutti.com.br
	My SPAMTRAP, do not email it