iptables FORWARD

Ipolit · 06-09-2005, 09:58 AM

I added this and it works
iptables -A FORWARD -m state --state ESTABLISHED -s 0/0 -j ACCEPT

perhaps the router was not forwarded packages from the ISP to my LAN
do u think it's enough

win32sux · 06-09-2005, 04:35 PM

Quote:

Originally posted by Ipolit
I added this and it works
iptables -A FORWARD -m state --state ESTABLISHED -s 0/0 -j ACCEPT

perhaps the router was not forwarded packages from the ISP to my LAN
do u think it's enough

LOL, yeah, i'd completely forgotten about that rule... it's needed so that the packets coming-back get forwarded properly... but you should match RELATED packets also, not just ESTABLISHED... like this:

Code:

iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT

place the rule above all your other FORWARD rules... have fun...