iptables again

depaul · 07-10-2003, 02:11 PM

i have these rules in /etc/sysconfig/iptables
-A RH-Lokkit-0-50-INPUT -p tcp -m tcp --syn -j REJECT
-A RH-Lokkit-0-50-INPUT -p udp -m udp -j REJECT
-A RH-Lokkit-0-50-INPUT -j ACCEPT -m mac --mac-source 00:00:E2:42:21:BA -p tcp --dport 110
-A RH-Lokkit-0-50-INPUT -j ACCEPT -m mac --mac-source 00:00:E2:42:21:BA -p udp --dport 110
the first two lines are blocking my mac sources lines
does anyone know what is the problem and suggestion are welcome.....

Hangdog42 · 07-10-2003, 05:15 PM

Iptables executes its rules in order, so if you move the first two lines to after the second two, the traffic headed for port 110 from that mac address will be accepted.

depaul · 07-11-2003, 12:08 PM

i tried it ... not working...

Pcghost · 07-11-2003, 12:29 PM

Check out the syntax rules at http://www.netfilter.org and then rewrite the file. The Redhat lokkit program makes iptables rules harder than they need to be. I would also suggest the book "Redhat Linux Firewalls". It made Iptables make sense and is well worth owning..