LinuxQuestions.org
Register a domain and help support LQ
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
Search this Thread
Old 10-23-2001, 09:19 PM   #1
Cpare
Member
 
Registered: Aug 2001
Location: Magic City, USA
Distribution: Ubuntu
Posts: 58

Rep: Reputation: 15
WU-FTPD and IPTABLES DROP Policy


configuring IPTABLES on my RH7.1 Router and want to acomplish the following...

- Keep WAN card "Locked Down" to only accept SSH connections (-A INPUT -i eth1 -p tcp --dport 22 -j ACCEPT) and DHCP renews from my providor (-A INPUT -p tcp --sport 67 --dport 68 -i eth1 -j ACCEPT).
- Keep LAN card wide open so I can run WU-FTPD/DHCPD/SSH on the LAN (-A INPUT -i eth0 -j ACCEPT)

Found that when I change the INPUT IPTABLES policy to DROP(-P INPUT DROP) I can no longer FTP in from the LAN. Change the Policy to ACCEPT and it works great, but I want the default policy to DROP...

Anyone doing this with success? I am concerned that I may need the KERNEL patch with the IPTABLES update, but not sure - hoping to hear that others out there are doing this combo with success.

Everything is working great besides this, just a little troubling to change the default policy to ACCEPT just to FTP in... Most likely this is due to my lack of knowledge on WU-FTPD - Could it be that the WU-FTPD daemon binds to a certain card/IP?

Last edited by Cpare; 10-23-2001 at 09:27 PM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
iptables DEFAULT POLICY lappen Linux - Newbie 8 02-23-2011 03:55 AM
security policy iptables Ammad Linux - Security 2 11-14-2005 06:15 AM
iptables - drop all -> allow needed OR allow all -> drop specific lucastic Linux - Security 5 12-21-2004 02:07 AM
iptables - default output policy ridertech Linux - Networking 1 05-08-2004 06:37 PM
iptables: Bad policy name rioguia Linux - Security 10 01-09-2003 11:21 PM


All times are GMT -5. The time now is 07:01 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration