Welcome to Linux Forums!

With a comprehensive Linux Forum, information on various types of Linux software and many Linux Reviews articles, we have all the knowledge you need a click away, or accessible via our knowledgeable members.

Linux Forum ArticlesLinux ForumsLinux Forum DownloadsLinux Hosts
Home|Register|FAQ|Member List|Calendar|Unanswered Posts|Forum Rules|Today's Posts|Advanced Search|
SEARCH FOR IN
Go Back   Linux Forums > GNU Linux Zone > Linux Networking
Reload this Page Iptables / Allow all traffic to from private IP?
Linux Forums
Linux Forums
Welcome To The Linux Forums!
Welcome to Linux Forums. We pride ourselves in being one of the largest Linux communities on the web, we encourage you to REGISTER on our forums and participate in the community. There are over 150,000 members ready to answer your questions. JOINING US today will allow you to make new posts, get support, send messages to other members and submit downloads to our downloads directory and many other great features!

Linux Networking Hardware/Software related, Modems, Internet connection sharing, IPTables etc.

Reply
 
Thread Tools Display Modes
Old 07-05-2008   #1 (permalink)
timebandit
Just Joined!
 
Join Date: Jul 2008
Posts: 2
Iptables / Allow all traffic to from private IP?

I'm using Debian with a iptables firewall script (Arno's). It works very well.
In the config I have choosen to only open up small amounts of ports needed and every else ports are blocked.

How do I open up all traffic to/from this IP to the internet?

My networks looks like following:

eth0, Internet IP
eth1, 192.168.1.2. Connected to this network is my workstation 192.168.1.3
eth2, 192.168.2.2. Connected to this network is my laptops(192.168.2.3, 192.168.2.4) and Nintendo Wii(192.168.2.6).

I want to allow all traffic to/from 192.168.2.6 to Internet.

Thanks in advance.
timebandit is offline   Reply With Quote
Old 07-05-2008   #2 (permalink)
Lazydog
Linux User
 
Lazydog's Avatar
 
Join Date: Jun 2004
Location: Pennsylvania
Posts: 459
Code:
iptables -A INPUT -i <iface> -s 192.168.2.6 -j ACCEPT
<iface> being the interface that 192.168.2.6 is connecting to.
__________________

Regards
Robert

Smile..... it increases your face value!
Linux User #296285
Get Counted
Lazydog is offline   Reply With Quote
Old 07-05-2008   #3 (permalink)
Lazydog
Linux User
 
Lazydog's Avatar
 
Join Date: Jun 2004
Location: Pennsylvania
Posts: 459
Simple:

Code:
iptables -A INPUT -i <iface> -s 192.168.2.6 -j ACCEPT
<iface> being the interface that 192.168.2.6 is connecting to.
__________________

Regards
Robert

Smile..... it increases your face value!
Linux User #296285
Get Counted
Lazydog is offline   Reply With Quote
Old 07-05-2008   #4 (permalink)
timebandit
Just Joined!
 
Join Date: Jul 2008
Posts: 2
Thanks for replying...

That didn't do much for me :/

When looking into the logfiles it still says:
Jul 5 19:12:36 dzn kernel: LAN->INET denied: IN=eth2 OUT=eth0 SRC=192.168.2.6 DST=207.38.11.34 LEN=46 TOS=0x00 PREC=0x00 TTL=63 ID=359 PROTO=UDP SPT=51329 DPT=27900 LEN=26

Seems like the iptables script is more advanced. Maybe hard to apply rules to this "Arno's IPTABLES Firewall Script" ?


Edit:

I have now suceeded... I did a whole reconfiguration of the script and now everything works. I had to configure for all IP's in the network.

Thanks.
timebandit is offline   Reply With Quote
Old 07-06-2008   #5 (permalink)
Lazydog
Linux User
 
Lazydog's Avatar
 
Join Date: Jun 2004
Location: Pennsylvania
Posts: 459
Try this one then,

Code:
iptables -I FORWARD -s 192.168.2.6 -j accept
Without knowing your script I can only take guesses. But looking at what you have posted the problem seems to be in the FORWARD table.

The above sets IPTABLES to accept all traffic from 192.168.2.6 no mater what interface it comes in on and forward it.
__________________

Regards
Robert

Smile..... it increases your face value!
Linux User #296285
Get Counted
Lazydog is offline   Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off




All times are GMT. The time now is 04:41 AM.




© 2000 - 2008 - All Rights Reserved - Property of  MAS Media

Content Relevant URLs by vBSEO 3.0.0