Weird Firewall Rules, RHE 6.0

smc2 · 02-01-2011, 06:08 AM

As you can see bellow, at the end of my firewall setting recently some weird new rules added
As I search they are for IP forwarding, but what does it means?what this server may forward and on what ports?

Thanks in Advance.

Code:

-A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -i tun+ -j ACCEPT
-A FORWARD -o tun+ -j ACCEPT
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
-A OUTPUT -o tun+ -j ACCEPT

COMMIT

Tinkster · 02-01-2011, 03:57 PM

Quote:

As you can see bellow, at the end of my firewall setting recently some wired new rules added
As I search they are for IP forwarding, but what does it means?what this server may forward and on what ports?

Thanks in Advance.

"tun" is a commonly used for virtual network interfaces, you'd
see something like that maybe if you installed qemu or the likes?

Oh, and I think the word you're after is "weird", not "wired".

Cheers,
Tink

smc2 · 02-02-2011, 03:12 AM

No, I don't use any virtual machines or devices. Could they be dangerous? Is it safe to remove them?
And thanks for attention and misspell correction

Tinkster · 02-02-2011, 10:26 AM

I'd ask myself why they showed up; what did you change recently?

And with these words I'm moving this thread over to security.

Cheers,
Tink