On Monday 27 May 2002 6:58 pm, [EMAIL PROTECTED] wrote:

> Hi,
>
> #set default chain policies
> /sbin/iptables --policy INPUT ACCEPT
> /sbin/iptables --policy OUTPUT ACCEPT
> /sbin/iptables --policy FORWARD ACCEPT

Yuk :-)

A good firewall has default DROP policies...

> #enable state-related connections
> /sbin/iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
> /sbin/iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
> /sbin/iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT

What about NEW connections ?   How do things get started in the first place ?

> I'm confused - I have had other iptables systems working before, which
> is why I'm so irritated :)

What is the actual problem you're having ?   (Preferably something a bit more 
descriptive than "it doesn't work" :-)

Tell us what works, what doesn't, what tests you've tried - we can probably 
suggest something which might help.



Antony.

Reply via email to