Results 1 to 4 of 4
Hi, I have created a new iptable and have managed to stop myself from sending email/ browsing the net and accessing smb shares on my network.
Oops.
I'm sure it's ...
- 08-04-2004 #1Just Joined!
- Join Date
- Dec 2003
- Posts
- 39
new iptable config problems - newbue needs help!!
Hi, I have created a new iptable and have managed to stop myself from sending email/ browsing the net and accessing smb shares on my network.
Oops.
I'm sure it's something simple. Here is my iptable:
ptables-save v1.2.7a on Tue Aug 3 17:09:16 2004
*filter
:INPUT DROP [10896:637688]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [28483:2119136]
[27554:1937000] -A INPUT -i lo -j ACCEPT
[46:5729] -A INPUT -i eth0 -p tcp -m tcp --dport 25 -j ACCEPT
[141:27648] -A INPUT -i eth0 -p tcp -m tcp --dport 80 -j ACCEPT
[0:0] -A INPUT -s x.x.x.x -i eth0 -p tcp -m tcp --dport xx -j ACCEPT
[3:180] -A INPUT -i eth0 -p icmp -m icmp --icmp-type 8 -j ACCEPT
[10784:617272] -A INPUT -j LOG --log-prefix "drop INPUT packet"
[0:0] -A INPUT -i eth0 -p tcp
COMMIT
# Completed on Tue Aug 3 17:09:16 2004
NB I am allowing webmin from my windows pc to the linux box which is the rule with the x.x.x.x in.
If someone could point me in the right direction I'd be most appreciative
- 08-06-2004 #2Linux Engineer
- Join Date
- May 2003
- Location
- Greece / Athens
- Posts
- 1,169
looking for man iptables would be useful i think..
Linux For Ever!
- 08-07-2004 #3Just Joined!
- Join Date
- Jul 2004
- Location
- UK
- Posts
- 77
Remove all of your accept rules. By default e-mail and the like should be allowed through. Let me know what happens.
And I will look into it further.
Armage
- 09-15-2004 #4Just Joined!
- Join Date
- Sep 2004
- Posts
- 7
The input rules should be --sport rather than --dport, as this is
traffic coming back in from the server.


Reply With Quote
