Linux Netfilter discussions
 help / color / mirror / Atom feed
From: "Guillaume" <gkweb@wanadoo.fr>
To: netfilter@lists.netfilter.org
Subject: nat table
Date: Sat, 7 Sep 2002 18:56:06 +0200	[thread overview]
Message-ID: <000901c2568f$757ca410$0100a8c0@poste1> (raw)

[-- Attachment #1: Type: text/plain, Size: 936 bytes --]

I have a windows PC behind a linux gateway with iptables. Whit it, the default policy for all is DROP, but the two line "mangle" are ACCEPT.
All work well to go on internet, send/received email,etc...
But there is one thing wich don't want to work, and i don't understand at all what is wrong. I have a small daemon who is listening on my network card eth0 on LAN side at port 3000, and I can't connect on it from my windows browser.
But, when I put policy for nat table "POSTROUTING, OUTPUT" to ACCEPT, it's work! I am able to connect on my daemon.
I don't understand because I have between other the folowing rules:

iptables -t nat -A PREROUTING   -i eth0 -j ACCEPT
iptables -t nat -A POSTROUTING -o eth0 -j ACCEPT
iptables -t nat -A OUTPUT           -o eth0 -j ACCEPT

Why when i put default policy of nat table to DROP, i can't connect? even with this rules?
What i have to do against?

Thanks.

        Guillaume.

[-- Attachment #2: Type: text/html, Size: 2060 bytes --]

             reply	other threads:[~2002-09-07 16:56 UTC|newest]

Thread overview: 2+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2002-09-07 16:56 Guillaume [this message]
2002-09-07 19:06 ` nat table Antony Stone

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to='000901c2568f$757ca410$0100a8c0@poste1' \
    --to=gkweb@wanadoo.fr \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox