iptables
 

hey
need help
actually i read many sites about iptables but i need to know this mechanism of :
-i know when i SYN (open page) it go via output, then SYN-ACK (Reply page) At INPUT. Right
-let say i have server and clients so why i when i do:
1) on OUTPUT :iptables -A OUTPUT -m state --state NEW,ESTABLISHED -j ACCEPT
2) on INPUT: iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
3) on FORWARD: iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
( all clients can open anything regardless if i DROP or Decline for ex: i want specific ports on forward to only open) why not happen!
my theory is that clients when they open page ( it go from FORWARD to OUTPUT then page reply to INPUT and forward it to FORWARD chain) can someone tell me how this happen and if i'm wrong! really, i read many sites and didn't got it exactly this one!
Thanks alot for your help , and hope someone can help me!

NOTE: All Policies Are in DROP Mode (The INPUT,OUTPUT,And The FORWARD CHAIN)

Take Care...

Please post your thread in only one forum. Posting a single thread in the most relevant forum will make it easier for members to help you and will keep the discussion in one place. This thread is being closed because it is a duplicate.

http://www.linuxquestions.org/questi...tables-768740/