Re: Tightening up outgoing traffic

[Neil Hodge <neh@attbi.com>]

All:

On Tue, 2002-10-15 at 05:47, Neil Hodge wrote:
> All:
> 
> When I change to this:
> 
> iptables -P OUTPUT DROP
> iptables -A OUTPUT -p tcp --destination-port http -j ACCEPT
> 
> I keep getting "domainname can not be found.  Please check the name
and
> try again" from my browser.  This only happens for new web sites
(i.e.,
> Yahoo works fine).  As this seems somewhat like a DNS issue, I tried
> adding this:
> 
> iptables -A OUTPUT -p tcp --destination-port nameserver -j ACCEPT
> 
> but it didn't work.  Any ideas?  Thanks.
> 
> Neil Hodge
> 

Thanks for all of the information.  It worked well.  Although, when I
had to reboot (for another reason), X wouldn't start . . .  Alas, that's
a battle for another day.

Thanks!

Neil