how should set up iptables to accept WWW connection

samohn · 08-29-2008, 07:21 AM

I think I now understood what you requested me to do.

Here is the current one:

Code:

iptables -nvL
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
 8658 2623K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
    4   240 ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0           
   83  3984 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:80 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:22 
  447 39743 REJECT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-prohibited 

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 REJECT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-prohibited 

Chain OUTPUT (policy ACCEPT 8974 packets, 2766K bytes)
 pkts bytes target     prot opt in     out     source               destination

I set WWW and SSL through Firewall Configuration GUI.

samohn · 08-29-2008, 07:26 AM

I just posted the current iptables setting using Quick reply, but I do not see the new post. I post it again below:

Code:

iptables -nvL
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
 8658 2623K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
    4   240 ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0           
   83  3984 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:80 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:22 
  447 39743 REJECT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-prohibited 

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 REJECT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-prohibited 

Chain OUTPUT (policy ACCEPT 8974 packets, 2766K bytes)
 pkts bytes target     prot opt in     out     source               destination

I set www and SSL through Firewall Configuration GUI tool.

samohn · 08-29-2008, 03:50 PM

Quote:

Originally Posted by win32sux

By using the iptables command to set everything up, and only doing a save when you're happy with how everything is set up. It's common practice to create a script, cuz you can easily make edits to it. So once you've got your script perfected, you execute it, then proceed to save the configuration. You never need to touch the saved configuration file.

Well, you still haven't posted the relevant "iptables -nvL" output, so we have no idea what your current iptables configuration is. If you feel overwhelmed by iptables at this time you have lots of front-ends available to make things easier for you until you get comfortable with iptables.

I have posted the "iptalbes -nvL" for current iptables. Plese take a look at.

Thank you.

win32sux · 08-30-2008, 12:58 AM

Seriously, by now you really should know how to use code tags. I mean, I've even given you a link to clear instructions on how to use them and everything. Here's an example of how to use them:

[code]Your output goes here.[/code]

And yeah, the iptables configuration you posted looks fine to me.

samohn · 08-30-2008, 09:03 PM

Quote:

Originally Posted by win32sux

Seriously, by now you really should know how to use code tags. I mean, I've even given you a link to clear instructions on how to use them and everything. Here's an example of how to use them:

[code]Your output goes here.[/code]

And yeah, the iptables configuration you posted looks fine to me.

I am sorry. I thought the code tag should be used only for a code such as script. But, now I understood it, and just edited my previously posted threds which contain "code".

Thank you.