Re: cant ping fw

[Brent Clark <bclark@eccotours.dyndns.org>]

Jörg_Harmuth wrote:
> Is this really the complete rule set ? No rules in OUTPUT and FORWARD,
> but policy set to DROP ? Anyway.
> There is no rule for lo. Add
> $IPT -<I | A> INPUT -i lo -j ACCEPT
> $IPT -<I | A> OUTPUT -o lo -j ACCEPT
> and for echo reply add
> $IPT -A OUTPUT -p icmp --icmp-type echo-reply -j ACCEPT
> This should work.
> Have a nice time,
> Joerg

Hi Joerg

here is my OUTPUT

$IPT -t filter -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
$IPT -t filter -A OUTPUT -m state --state INVALID -j LOG --log-prefix 
"INVALID output: " --log-tcp-options --log-ip-options
$IPT -t filter -A OUTPUT -m state --state INVALID -j DROP
$IPT -t filter -A OUTPUT -m state --state NEW -j ACCEPT
$IPT -t filter -A OUTPUT -j LOG --log-prefix "[OUTPUT DROP]: " 
--log-tcp-options --log-ip-options
$IPT -t filter -A OUTPUT -j DROP

and for my lo

$IPT -A INPUT -i lo -j ACCEPT
$IPT -A OUTPUT -o lo -j ACCEPT