iptables: should I ACCEPT incomming pakets for my outgoing connections?

iflorea · 08-11-2006, 05:09 AM

I'm trying to understand iptables..
As I undestud if i don'n wand any connection from outside I should not ACCEPT any incomming connection.. but if i do so, the outgouig connections fails to... My PC does not Accept responses from connections initiated by me.
Did'n I get somethig?
Tanks,

My iptables-save is:
# Generated by iptables-save v1.3.0 on Fri Aug 11 12:59:12 2006
*nat
:OUTPUT ACCEPT [164:13722]
:POSTROUTING ACCEPT [164:13722]
:PREROUTING ACCEPT [248:45784]
COMMIT
# Completed on Fri Aug 11 12:59:12 2006
# Generated by iptables-save v1.3.0 on Fri Aug 11 12:59:12 2006
*filter
:FORWARD DROP [0:0]
:INPUT DROP [2647:1576110]
:OUTPUT ACCEPT [2068:310185]
COMMIT
# Completed on Fri Aug 11 12:59:12 2006

b0uncer · 08-11-2006, 05:13 AM

Yes, you need to track the connections and allow those connections that are related to your existing connections:

Code:

/sbin/iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

That appends a new rule to your INPUT chain that ACCEPTs those connections that are tracked to be related to some existing connections (started by you). Read more from

Code:

man iptables

I must apologize I don't have a Linux box to test if the command succeeds but if it doesn't, there's just some minor typing error. Try that out and if it fails, read the man page if I miswrote some part, though it should be like that.

iflorea · 08-11-2006, 06:51 AM

Thanks a lot,
It works now..