Latest LQ Deal: Complete CCNA, CCNP & Red Hat Certification Training Bundle
Go Back > Forums > Linux Forums > Linux - Networking
User Name
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.


  Search this Thread
Old 10-23-2001, 10:19 PM   #1
Registered: Aug 2001
Location: Magic City, USA
Distribution: Ubuntu
Posts: 73

Rep: Reputation: 15

configuring IPTABLES on my RH7.1 Router and want to acomplish the following...

- Keep WAN card "Locked Down" to only accept SSH connections (-A INPUT -i eth1 -p tcp --dport 22 -j ACCEPT) and DHCP renews from my providor (-A INPUT -p tcp --sport 67 --dport 68 -i eth1 -j ACCEPT).
- Keep LAN card wide open so I can run WU-FTPD/DHCPD/SSH on the LAN (-A INPUT -i eth0 -j ACCEPT)

Found that when I change the INPUT IPTABLES policy to DROP(-P INPUT DROP) I can no longer FTP in from the LAN. Change the Policy to ACCEPT and it works great, but I want the default policy to DROP...

Anyone doing this with success? I am concerned that I may need the KERNEL patch with the IPTABLES update, but not sure - hoping to hear that others out there are doing this combo with success.

Everything is working great besides this, just a little troubling to change the default policy to ACCEPT just to FTP in... Most likely this is due to my lack of knowledge on WU-FTPD - Could it be that the WU-FTPD daemon binds to a certain card/IP?

Last edited by Cpare; 10-23-2001 at 10:27 PM.


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
iptables DEFAULT POLICY lappen Linux - Newbie 8 02-23-2011 04:55 AM
security policy iptables Ammad Linux - Security 2 11-14-2005 07:15 AM
iptables - drop all -> allow needed OR allow all -> drop specific lucastic Linux - Security 5 12-21-2004 03:07 AM
iptables - default output policy ridertech Linux - Networking 1 05-08-2004 07:37 PM
iptables: Bad policy name rioguia Linux - Security 10 01-10-2003 12:21 AM > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 12:00 AM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration