[SOLVED] iptables http problem

Colatra · 08-07-2014, 10:05 AM

hey guys
i can't access any http website.
my iptables config. what i'm doing wrong?

Quote:

# Rules
iptables -P INPUT DROP
iptables -P OUTPUT DROP
iptables -P FORWARD DROP

# 1.ssh incoming
iptables -A INPUT -p tcp --dport 5678 -m state --state NEW,ESTABLISHED -j ACCEPT
iptables -A OUTPUT -p tcp --sport 5678 -m state --state ESTABLISHED -j ACCEPT
# 1.ssh outgoing
iptables -A OUTPUT -p tcp --dport 5678 -m state --state NEW,ESTABLISHED -j ACCEPT
iptables -A INPUT -p tcp --sport 5678 -m state --state ESTABLISHED -j ACCEPT

# 2.HTTP incoming
iptables -A INPUT -p tcp --dport 80 -m state --state NEW,ESTABLISHED -j ACCEPT
iptables -A OUTPUT -p tcp --sport 80 -m state --state ESTABLISHED -j ACCEPT
iptables -A INPUT -p tcp --dport 443 -m state --state NEW,ESTABLISHED -j ACCEPT
iptables -A OUTPUT -p tcp --sport 443 -m state --state ESTABLISHED -j ACCEPT

# 2.HHTP Outgoing
iptables -A OUTPUT -p tcp --dport 80 -m state --state NEW,ESTABLISHED -j ACCEPT
iptables -A INPUT -p tcp --sport 80 -m state --state ESTABLISHED -j ACCEPT
iptables -A OUTPUT -p tcp --dport 443 -m state --state NEW,ESTABLISHED -j ACCEPT
iptables -A INPUT -p tcp --sport 443 -m state --state ESTABLISHED -j ACCEPT

smallpond · 08-07-2014, 10:33 AM

You can get a count of how many times each rule is triggered. Run it before and after your browse attempt:

iptables -v -L

Colatra · 08-07-2014, 02:55 PM

i want to block all communications except ssh and http, but i can't do that. I'm searching on google and i read a lot and i can't understand where i'm failing.

Colatra · 08-07-2014, 03:40 PM

lol solved the problem