From: Miroslav Rovis <miro.rovis@croatiafidelis.hr>
To: netfilter@vger.kernel.org
Cc: Johannes Ernst <johannes.ernst@gmail.com>
Subject: Re: Masquerading with selectively open ports -- nftables
Date: Sat, 26 Mar 2016 06:06:15 +0100 [thread overview]
Message-ID: <20160326050615.GA21364@g0n> (raw)
In-Reply-To: <E3A2E5F1-41EB-41BA-A45D-7FEF5680DC15@gmail.com>
[-- Attachment #1: Type: text/plain, Size: 700 bytes --]
The text in my previous mail
(
http://permalink.gmane.org/gmane.comp.security.firewalls.netfilter.general/48565
)
about the typo in Nftables Archlinux Wiki should have read (notice the
dport, twice):
https://wiki.archlinux.org/index.php/Nftables#Practical_examples
Different rules for different interfaces
is:
tcp port http accept
tcp port https accept
but there ought to be:
tcp dport http accept
tcp dport https accept
And then only the example works, as I showed in my Gentoo Forums topic:
A Firewalled Internet Access to Internal Subnet
https://forums.gentoo.org/viewtopic-t-1041028.html#7897320
as Neal P. Murphy pointed out to me in private email. Thanks, and sorry.
[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 819 bytes --]
prev parent reply other threads:[~2016-03-26 5:06 UTC|newest]
Thread overview: 16+ messages / expand[flat|nested] mbox.gz Atom feed top
2015-10-28 17:14 Masquerading with selectively open ports -- nftables Johannes Ernst
2015-10-28 23:15 ` Pablo Neira Ayuso
2015-10-29 4:51 ` Johannes Ernst
2015-10-29 8:11 ` Arturo Borrero Gonzalez
2015-10-29 19:55 ` Pablo Neira Ayuso
2015-10-30 10:50 ` Arturo Borrero Gonzalez
2015-10-30 11:46 ` Pablo Neira Ayuso
2015-10-30 18:25 ` Johannes Ernst
2015-10-30 18:27 ` Arturo Borrero Gonzalez
2015-10-30 18:56 ` Johannes Ernst
2015-11-02 20:29 ` Johannes Ernst
2015-10-29 22:21 ` Johannes Ernst
2015-10-29 23:48 ` kernel modules: was " Johannes Ernst
2015-10-30 11:16 ` Pablo Neira Ayuso
2016-03-25 20:37 ` Miroslav Rovis
2016-03-26 5:06 ` Miroslav Rovis [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20160326050615.GA21364@g0n \
--to=miro.rovis@croatiafidelis.hr \
--cc=johannes.ernst@gmail.com \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox