Just a bit of nitpicking.........
Quote:
|
The iptables -A switch will APPEND or put at the end of a chain, whereas iptables -I will INSERT at the beginning of the chain. Packets are probably being dropped before a pass rule is examined.
|
You're right about -A, but -I takes a numerical argument that places the rule at a specific point in the chain. So -I 1 would put the rule at the start of the chain, but -I 5 would place it at the fifth line. However, the broader point that you bring up, namely that the rules within a table are executed in order and a packet is dealt with according to the first rule it matches, is correct.
Quote:
|
If your pass rules are at the end of a chain, it won't work...
|
This may, or may not, be true. If the pass rules are at the end of a chain they will work,
so long as there is no rule before the pass rule that would do something else with the packet.
