From: "Brad Morgan" <B-Morgan@concentric.net>
To: 'Antony Stone' <Antony@Soft-Solutions.co.uk>,
netfilter@lists.netfilter.org
Subject: RE: problem with forward/nat
Date: Sun, 7 Mar 2004 08:57:04 -0700 [thread overview]
Message-ID: <007d01c4045c$d9130060$0400a8c0@bradmorgan> (raw)
In-Reply-To: <200403071503.56728.Antony@Soft-Solutions.co.uk>
> > Once you hit that rule, the only thing going past
> > are INVALID packets so the rest of the INPUT and OUTPUT chains aren't
> doing
> > anything useful.
>
> No, the other rules are dealing with packets to interfaces other than lo.
Opps, I missed the lo! That means there is no ESTABLISHED,RELATED rule for
the Ethernet traffic. My suggestions remove the lo interface which fixes
that.
So for local traffic add the rule:
iptables -A INPUT -i lo -j ACCEPT
just after the drop of INVALID state packets. Since I leave the OUTPUT
default policy as ACCEPT, I don't have an OUTPUT rule for lo but it would
probably be:
iptables -A OUTOUT -o lo -j ACCEPT
again placed just after the drop of INVALID state packets.
next prev parent reply other threads:[~2004-03-07 15:57 UTC|newest]
Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-03-07 3:13 problem with forward/nat Pierre Gillet
2004-03-07 9:26 ` Antony Stone
2004-03-07 9:46 ` Antony Stone
2004-03-07 14:47 ` Brad Morgan
2004-03-07 15:03 ` Antony Stone
2004-03-07 15:57 ` Brad Morgan [this message]
2004-03-07 18:24 ` Fabian Hartmann
2004-03-07 18:37 ` Antony Stone
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to='007d01c4045c$d9130060$0400a8c0@bradmorgan' \
--to=b-morgan@concentric.net \
--cc=Antony@Soft-Solutions.co.uk \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox