Re: iptables: exe

[Tasha Smith <natasha3641@yahoo.com>]

Thanks Anthony for your tips..:) im just starting out
with iptables soo it is really helping..and yes i have
2 interfaces soo i will move the forwarding rule to
the end, and add these rules:
iptables --policy OUTPUT DROP
iptables --policy FORWARD DROP
iptables -t nat --policy PREROUTING DROP
iptables -t nat --policy OUTPUT DROP
iptables -t nat --policy FORWARD DROP

HEHEHE...now only if i could get them to startup :)
properly!!


--- Tasha Smith <natasha3641@yahoo.com> wrote:
> Ok...i have my own iptables script trying to get it
> going...here what i have soo far in it...just
> starting
>  
> SPECS: 
> RedHat 7.2 
> 2.4.19 Kernel 
> iptables-1.2.3 
> 
> ####################################### 
> #!/bin/bash 
> 
> echo 1 = > /proc/sys/net/ipv4//ip_forward 
> iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
> 
> 
> # Remove any existing rules from all chains. 
> iptables --flush 
> iptables -t nat --flush 
> 
> # Unlimited access on the loopback interface 
> iptables -A INPUT -i lo -j ACCEPT 
> iptables -A OUPUT -o lo -j ACCPET 
> 
> # Set the fefault policy to Drop 
> iptables --policy INPUT DROP 
> ####################################### 
> Now... to get this to run on start-up here is what i
> did but it didnt start up it gave me an error. 
> chown root.root /etc/init.d/firewall 
> chmod u=rwx /etc/init.d /firewall 
> 
> And when i restart I GET ERROR... which is 
> "iptables: execvp: Permission Denied 
> rc. Starting iptables: Failed"  
> 
> I also have this line sh /etc/init.d/firewall at the
> end of my "rc.local" file 
> 
> HOW CAN I FIX THIS OR GET THEM TO START-UP PROPERLY?
> EDIT: > OOPPPPPPSS guys  i forgot to mention the
> original iptables script that came installed already
> on my system in the "/etc/init.d/" i moved that to
> somewhere else.... was i suppose to do that or just
> leave them there???
> 
> 
> 
> =====
> 
> Image by MackDaddy
> 
> __________________________________________________
> Do you Yahoo!?
> New DSL Internet Access from SBC & Yahoo!
> http://sbc.yahoo.com
> 


__________________________________________________
Do you Yahoo!?
New DSL Internet Access from SBC & Yahoo!
http://sbc.yahoo.com