From: Derek Storvik <dstorvik@pf.ueo.ohio-state.edu>
To: netfilter@lists.netfilter.org
Subject: Iptables not working with RH9
Date: Thu, 20 Nov 2003 10:54:41 -0500 [thread overview]
Message-ID: <sfbc9d8f.047@pf.ueo.ohio-state.edu> (raw)
Hello all
Hopefully someone can see my error.
I have been running RH7.3 with it's standard kernal version 2.4.18-3 for several months configured as a transparent bridging firewall. We recently purchased a new machine and wanted to install RH9 with its standard kernal 2.4.20( i think)I followed the same steps installed with iptables and bridging utils and used my same script file to setup the bridge with two nics and fill in all my rules. This didn't seem to work right and on further testing realized NOTHING was being filtered. I then rebooted and manualy set up the bridge and cleared all the tables and set the default policy to drop. SO at this point nothing should get through. Well it bridges everything, and the counters in iptables do not increment. The system acts as if it is not there what so ever.
here is the setup after the basic minimal install
brctl addbr br0
brctl addif br0 eth0
brctl addif br0 eth1
ifconfig eth1 0.0.0.0 promisc
ifconfig eth0 0.0.0.0 promisc
#bring up bridge with either of the next two commands
ifconfig br0 up
ip link set br0 up
#both do the same thing namely nothing
iptables -X
iptables -F
iptables -P FORWARD DROP
iptables -P INPUT DROP
iptables -P OUTPUT DROP
This setup happily bridges packets right on through with no updates to the iptables counters.
I have been experimenting with devil linux as well recently and it exhibits the same problem.
ip_forwarding is set to 0 as it has been on my working rh7.3 machine I tried setting it to 1 but that didn't help the problems. Im not 100% sure what exactl the ip_forwarding property corresponds to anyway.
any help would be greatly appreciated!
Thanks
Derek
next reply other threads:[~2003-11-20 15:54 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2003-11-20 15:54 Derek Storvik [this message]
2003-11-20 16:17 ` Iptables not working with RH9 Scott MacKay
2003-11-20 17:17 ` Ramin Dousti
2003-11-20 17:53 ` Scott MacKay
-- strict thread matches above, loose matches on Subject: below --
2003-11-20 16:29 Derek Storvik
2003-11-21 1:47 ` Josh Berry
2003-11-24 13:51 Derek Storvik
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=sfbc9d8f.047@pf.ueo.ohio-state.edu \
--to=dstorvik@pf.ueo.ohio-state.edu \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.