From: "Alejandro Cabrera Obed" <sisdis@tournet.com.ar>
To: "Netfilter lista (iptables)" <netfilter@lists.netfilter.org>
Subject: Forward rules
Date: Fri, 28 Nov 2003 16:18:13 -0300 [thread overview]
Message-ID: <008301c3b5e4$640b9f00$0200a8c0@ale> (raw)
Hello !!!
I'm building my FORWARD table rules, and I want to implement this: "Drop all
FORWARD packets by default and then accept only packets coming from LAN
(192.168.0.0/24) with the related and established condition and leaving my
external interface ($INET_IFACE)".
Is the next ruleset according to what I want or can I change the order ???
$IPTABLES -P FORWARD DROP
$IPTABLES -A FORWARD -s 192.168.0.0/24 -o $INET_IFACE -j ACCEPT
$IPTABLES -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
I suppose with this implementation I'm discarding packet forwarding coming
from 127.0.0.0/24, 10.0.0.0/8 and 172.16.0.0/12 (because my default policy
is DROP by default)....is it OK ???
Thousands of thanks :)
Alejandro
next reply other threads:[~2003-11-28 19:18 UTC|newest]
Thread overview: 21+ messages / expand[flat|nested] mbox.gz Atom feed top
2003-11-28 19:18 Alejandro Cabrera Obed [this message]
2003-11-28 20:03 ` Forward rules Jeffrey Laramie
-- strict thread matches above, loose matches on Subject: below --
2003-09-16 4:28 FORWARD rules Payal Rathod
2003-09-10 17:52 Payal Rathod
2003-09-10 18:44 ` Ramin Dousti
2003-09-11 2:15 ` netfilter
2003-09-10 18:47 ` Vladimir Potapov
2003-09-11 6:09 ` Vishwanatn T. K.
2003-09-12 10:09 ` Payal Rathod
2003-09-12 10:45 ` Cedric Blancher
2003-09-12 14:36 ` Arnt Karlsen
2003-09-12 14:51 ` Cedric Blancher
2003-09-12 18:14 ` Arnt Karlsen
2003-09-13 2:26 ` Payal Rathod
2003-09-13 6:42 ` Arnt Karlsen
2003-09-15 7:56 ` Cedric Blancher
2003-09-15 16:32 ` Arnt Karlsen
2003-09-15 17:34 ` Cedric Blancher
2003-09-16 4:28 ` Payal Rathod
2003-09-16 23:31 ` Arnt Karlsen
2003-09-12 10:35 ` Cedric Blancher
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to='008301c3b5e4$640b9f00$0200a8c0@ale' \
--to=sisdis@tournet.com.ar \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox