From: "Mihamina Rakotomandimby (R12y)" <mihamina@lab.vectoris.fr>
To: netfilter@vger.kernel.org
Subject: FORWARD -P DROP + allow MSN
Date: Thu, 16 Apr 2009 12:30:27 +0300 [thread overview]
Message-ID: <49E6FAB3.90304@lab.vectoris.fr> (raw)
Hi,
These are my current rules:
http://lab.vectoris.fr/projects/vectoris/browser/IPTables/trunk/firewall
(It's a big mess yet because I miss one feature: MSN. I'll clean it later)
The box it's running on is the gateway of the LAN to the Internet.
As you noticed, FORWARD is DROP by default.
I would like to allow MSN to my LAN users.
The problem:
If I "FORWARD -P ACCEPT", MSN works for the LAN users.
If I use it as it is now, MSN doesnt work.
Anyway, when setting the MSN LAN clients to use HTTP, it's OK with this config.
Any tips?
Thank you.
PS: no comments on the crappy Facebook DROP ;-).
--
Chef de projet chez Vectoris
Phone: +261 33 11 207 36
System: xUbuntu 8.10 with almost all from package install
http://www.google.com/search?q=mihamina+rakotomandimby
next reply other threads:[~2009-04-16 9:30 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2009-04-16 9:30 Mihamina Rakotomandimby (R12y) [this message]
2009-04-16 10:10 ` FORWARD -P DROP + allow MSN Mart Frauenlob
2009-04-16 11:30 ` Mihamina Rakotomandimby (R12y)
2009-04-16 13:31 ` Mart Frauenlob
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=49E6FAB3.90304@lab.vectoris.fr \
--to=mihamina@lab.vectoris.fr \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.