Re: iptables problem

["Your Name" <yayati@skinternational.com>]

> Hi,
> I've a problem with iptables on a machine which is a firewall. The 
logs 
> reports the following thing:
> 
> firewall:~ # grep 192.168.2.200 /var/log/messages | grep DPT=53
> Feb 14 11:45:52 firewall kernel: PUPPUFIREWALLIN=eth1 OUT=eth1 
> SRC=192.168.2.200 DST=217.97.32.2 LEN=50 TOS=0x00 PREC=0x00 TTL=126 
ID=9 
> PROTO=UDP SPT=1025 DPT=53 LEN=30
> Feb 14 11:47:40 firewall kernel: PUPPUFIREWALLIN=eth1 OUT=eth1 
> SRC=192.168.2.200 DST=217.97.32.2 LEN=72 TOS=0x00 PREC=0x00 TTL=126 
ID=812 
> PROTO=UDP SPT=1025 DPT=53 LEN=52
> 
> where the machine 192.168.2.200 is locked and cannot work with the 
DNS (port 
> 53) specified. But if I try to do an iptables-save, I got the 
following:
> 
> -A FORWARD -s 192.168.2.0/255.255.255.0 -d 212.97.32.2 -i eth1 -o 
eth1 -p tcp 
> -m tcp --dport 53 -j ACCEPT
> 


The Input interface and output Interface are the same eth1, where as it 
should have been -i eth0 -o eth1. Match ur interface numbers and it 
should work.

Regards