From: Martijn Lievaart <m@rtij.nl>
To: mouss <mouss@netoyen.net>
Cc: netfilter@vger.kernel.org
Subject: Re: iptables block samba or not?
Date: Thu, 24 Jan 2008 22:37:09 +0100 [thread overview]
Message-ID: <47990505.9010209@rtij.nl> (raw)
In-Reply-To: <4798FF72.2020609@netoyen.net>
mouss wrote:
> Eial Czerwacki wrote:
>> I've got this too has part of the rules
>>
>> -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
>>
>
> but not for output. what if your linux box initiates the connection?
Output policy is accept, so this is no problem. The state match does not
create contracks, it just tests them. The conntrack is created once the
first packet is accepted.
>
> Also, as I said before, allow for icmp (echo if you add a stateful
> accept for output icmp's if you don't have the stateful rule).
This is a matter of taste and has nothing to do with the OPs problems.
M4
next prev parent reply other threads:[~2008-01-24 21:37 UTC|newest]
Thread overview: 18+ messages / expand[flat|nested] mbox.gz Atom feed top
2008-01-21 22:33 iptables block samba or not? Eial Czerwacki
2008-01-22 1:52 ` Leonardo Rodrigues Magalhães
2008-01-23 22:00 ` Dzianis Kahanovich
2008-01-24 20:16 ` mouss
2008-01-24 20:17 ` Eial Czerwacki
2008-01-24 21:13 ` mouss
2008-01-24 21:37 ` Martijn Lievaart [this message]
2008-01-25 10:40 ` Eial Czerwacki
2008-01-25 11:49 ` mouss
2008-01-25 13:35 ` Eial Czerwacki
2008-01-25 13:42 ` mouss
2008-01-25 14:27 ` Eial Czerwacki
2008-01-25 15:15 ` mouss
2008-01-25 16:02 ` Eial Czerwacki
2008-01-25 16:13 ` mouss
2008-01-25 16:53 ` Eial Czerwacki
2008-01-25 19:02 ` Martijn Lievaart
2008-01-25 16:04 ` Steven Ayre
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=47990505.9010209@rtij.nl \
--to=m@rtij.nl \
--cc=mouss@netoyen.net \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox