* Problem with iptables -A FORWARD -j DROP
@ 2003-02-19 13:16 Gabriel Güeto
2003-02-20 11:37 ` Bernd Podey
0 siblings, 1 reply; 3+ messages in thread
From: Gabriel Güeto @ 2003-02-19 13:16 UTC (permalink / raw)
To: netfilter
[-- Attachment #1: Type: text/plain, Size: 570 bytes --]
Hello, I'm installing a bridge-firewall an all is OK, but whe I deny all the 'FORWARD' traffic this rule deny all the traffic included the 'ACCEPT' rules. Mi Kernel is 2.4.18
and i installed itables 1.2.5-3. My script is:
iptables -F FORWARD
iptables -F INPUT
iptables -F OUTPUT
iptables -A FORWARD -p icmp -s 89.0.0.0/24 -d 89.0.0.55/32 -j ACCEPT
iptables -A FORWARD -j DROP
If I quit the las line it's all OK, if I deny 'ping' it's OK, but if I put the last line all ping are deny.
Can somebody help me. I'm sorry for mu poor English.
Gabriel.
[-- Attachment #2: Type: text/html, Size: 1688 bytes --]
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: Problem with iptables -A FORWARD -j DROP
2003-02-19 13:16 Problem with iptables -A FORWARD -j DROP Gabriel Güeto
@ 2003-02-20 11:37 ` Bernd Podey
0 siblings, 0 replies; 3+ messages in thread
From: Bernd Podey @ 2003-02-20 11:37 UTC (permalink / raw)
To: Gabriel Güeto; +Cc: netfilter
Gabriel Güeto wrote:
> Hello, I'm installing a bridge-firewall an all is OK, but whe I deny all
> the 'FORWARD' traffic this rule deny all the traffic included the
> 'ACCEPT' rules. Mi Kernel is 2.4.18
> and i installed itables 1.2.5-3. My script is:
>
> iptables -F FORWARD
> iptables -F INPUT
> iptables -F OUTPUT
>
> iptables -A FORWARD -p icmp -s 89.0.0.0/24 -d 89.0.0.55/32 -j ACCEPT
>
> iptables -A FORWARD -j DROP
>
>
>
> If I quit the las line it's all OK, if I deny 'ping' it's OK, but if I
> put the last line all ping are deny.
>
> Can somebody help me. I'm sorry for mu poor English.
>
> Gabriel.
Hello!
You have to allow both communication directions!
Try the following:
iptables -A FORWARD -p icmp -s 89.0.0.0/24 -d 89.0.0.55/32 -j ACCEPT
iptables -A FORWARD -p icmp -s 89.0.0.55/32 -d 89.0.0.0/24 -j ACCEPT
iptables -A FORWARD -j DROP
and everything will work fine
Bernd
^ permalink raw reply [flat|nested] 3+ messages in thread
[parent not found: <FD8F124A387AD6119F7900A0D218B321725479@hslex01.hslbz.local>]
end of thread, other threads:[~2003-02-20 12:41 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2003-02-19 13:16 Problem with iptables -A FORWARD -j DROP Gabriel Güeto
2003-02-20 11:37 ` Bernd Podey
[not found] <FD8F124A387AD6119F7900A0D218B321725479@hslex01.hslbz.local>
2003-02-20 12:41 ` Rob Sterenborg
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox