Find the answer to your Linux question:
Results 1 to 4 of 4
Enjoy an ad free experience by logging in. Not a member yet? Register.
  1. #1

    new iptable config problems - newbue needs help!!

    Hi, I have created a new iptable and have managed to stop myself from sending email/ browsing the net and accessing smb shares on my network.
    I'm sure it's something simple. Here is my iptable:
    ptables-save v1.2.7a on Tue Aug 3 17:09:16 2004
    :INPUT DROP [10896:637688]
    :FORWARD DROP [0:0]
    :OUTPUT ACCEPT [28483:2119136]
    [27554:1937000] -A INPUT -i lo -j ACCEPT
    [46:5729] -A INPUT -i eth0 -p tcp -m tcp --dport 25 -j ACCEPT
    [141:27648] -A INPUT -i eth0 -p tcp -m tcp --dport 80 -j ACCEPT
    [0:0] -A INPUT -s x.x.x.x -i eth0 -p tcp -m tcp --dport xx -j ACCEPT
    [3:180] -A INPUT -i eth0 -p icmp -m icmp --icmp-type 8 -j ACCEPT
    [10784:617272] -A INPUT -j LOG --log-prefix "drop INPUT packet"
    [0:0] -A INPUT -i eth0 -p tcp
    # Completed on Tue Aug 3 17:09:16 2004

    NB I am allowing webmin from my windows pc to the linux box which is the rule with the x.x.x.x in.
    If someone could point me in the right direction I'd be most appreciative

  2. #2
    Linux Engineer
    Join Date
    May 2003
    Greece / Athens
    looking for man iptables would be useful i think..
    Linux For Ever!

  3. #3
    Just Joined!
    Join Date
    Jul 2004
    Remove all of your accept rules. By default e-mail and the like should be allowed through. Let me know what happens.

    And I will look into it further.


  4. $spacer_open
  5. #4
    The input rules should be --sport rather than --dport, as this is
    traffic coming back in from the server.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts