iptables

sachin1361 · 03-06-2007, 12:50 AM

This is regarding allowing internet access to my private network users.

My linux server has two interface. One public (eth0) and other private(eth1). Which iptables command will allow all private users to have access of internet ?I am doubtful if i enter the DNS source and destination port statement in the iptables for packets originating from private n/w ??? I needed the all required iptables statements for this scenario.

Thanx in advance

sachin1361 · 03-06-2007, 02:37 AM

[root@fruits ~]# iptables -A OUTPUT -j ACCEPT -m state --state NEW,ESTABLISHED,RELATED -o eth0 -p tcp -m multiport --dport 80,443 -m multiport --sport 1024:65535
*** glibc detected *** double free or corruption (fasttop): 0x0979cbe8 ***
Aborted

where is the problem ????????

SianZronG · 03-06-2007, 08:26 PM

Have you thought of setting eth1 as a trusted connection? so all connection coming in from here will be accepted?

sachin1361 · 03-06-2007, 11:46 PM

yes... i want to cosnider eth0 as a trusted connection so that internet access should be allowed to them...

I think there is some systex problem only in the command only.............pl check it

admiyo · 03-21-2007, 04:39 PM

Which Distro are you running? If it is a RHEL based one, then run

system-config-securitylevel And it should walk you through it.

(It had a different name under rhel3, something starting with redhat- I think.

If some other distro: There are numerous ui toolkits for building firewall rules. You might want to get one and play around with it. It is a great way to experiement.