iptables

jstu · 09-11-2002, 10:40 PM

IPTABLES=/usr/sbin/iptables

$IPTABLES -P INPUT DROP

$IPTABLES -A INPUT -p tcp --syn -j ACCEPT
$IPTABLES -A INPUT -p tcp -s 0/0 --dport 80 -j ACCEPT
$IPTABLES -A INPUT -p tcp -m state --state ESTABLISHED,RELATED -j ACCEPT

This is part of my firewall and it does not let me browse the internet. I know that I am missing a rule somewhere could someone please help me figure it out.

thanks

unSpawn · 09-12-2002, 06:52 AM

Since you're talking about the output chain and showing part of the input chain: post the whole thing.

Examples for Iptables firewalls are at Linuxguruz, or search tldp.org/linuxdoc.org/oibiblio.org.
Some more URI's:
Internet Firewalls FAQ,
Netfilter/iptables, ipchains log analyzer,
Review of automation tools,
String pattern matching,
Before firing up the firewall.

TruckStuff · 09-13-2002, 04:05 PM

It looks like you either need to post your entire script or actualy read something about iptables before writing your own script.