Linux Netfilter discussions
 help / color / mirror / Atom feed
* why do we need to allow all traffic from lo interface???
@ 2002-10-29  1:09 Tan Ming Han
  2002-10-29  8:52 ` Antony Stone
  0 siblings, 1 reply; 3+ messages in thread
From: Tan Ming Han @ 2002-10-29  1:09 UTC (permalink / raw)
  To: netfilter

hi,
   I seen some examples allowing all traffic (in INPUT and OUTPUT) from lo 
interface. Why is it so? Is it becos of the local XWindow connection?

pls advise...





_________________________________________________________________
Choose an Internet access plan right for you -- try MSN! 
http://resourcecenter.msn.com/access/plans/default.asp



^ permalink raw reply	[flat|nested] 3+ messages in thread

* Re: why do we need to allow all traffic from lo interface???
  2002-10-29  1:09 Tan Ming Han
@ 2002-10-29  8:52 ` Antony Stone
  0 siblings, 0 replies; 3+ messages in thread
From: Antony Stone @ 2002-10-29  8:52 UTC (permalink / raw)
  To: netfilter

On Tuesday 29 October 2002 1:09 am, Tan Ming Han wrote:

> hi,
>    I seen some examples allowing all traffic (in INPUT and OUTPUT) from lo
> interface. Why is it so? Is it becos of the local XWindow connection?

X requires this, yes; there are also certain other applications which use 
things like rpc calls or ident lookups.   A simple way to find out what 
traffic goes across the lo interface is to log it for a while:

iptables -A INPUT -i lo -j LOG --log-prefix="In-lo: "
iptables -A INPUT -i lo -j ACCEPT

Antony.

-- 

Windows: just another pane in the glass.


^ permalink raw reply	[flat|nested] 3+ messages in thread

* Re: why do we need to allow all traffic from lo interface???
@ 2002-10-30 10:00 Ben Tan
  0 siblings, 0 replies; 3+ messages in thread
From: Ben Tan @ 2002-10-30 10:00 UTC (permalink / raw)
  To: netfilter

[-- Attachment #1: Type: text/plain, Size: 53 bytes --]

hi antony,
    thanks for your help.

cheers



[-- Attachment #2: Type: text/html, Size: 647 bytes --]

^ permalink raw reply	[flat|nested] 3+ messages in thread

end of thread, other threads:[~2002-10-30 10:00 UTC | newest]

Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2002-10-30 10:00 why do we need to allow all traffic from lo interface??? Ben Tan
  -- strict thread matches above, loose matches on Subject: below --
2002-10-29  1:09 Tan Ming Han
2002-10-29  8:52 ` Antony Stone

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox