iptables

sanjibgupta · 11-09-2005, 01:33 AM

my iptables -L show this line
REJECT all -- xxx.xxx.xxx.xx/29 members.tmm.lyceu.netreject-with icmp-port-unreachable

but i am able to ping the site.
Though there are many other such lines in the file iptables -L file but they are not working
can u please tell me why?
sanjib gupta

b0uncer · 11-09-2005, 01:42 AM

I suppose it's rejecting packets from that address, yet letting you send packets there (ping), possibly even so that the packets you get back are related to an established connection (the one you started with ping), and thus get accepted. Does your iptables config contain a line with state ESTABLISHED,RELATED or anything alike?

Keep in mind that rejecting packets from outside does not reject packets from inside - necessarily. Read the config carefully through to understand it's every rule.

sanjibgupta · 11-09-2005, 01:51 AM

no my table doesnot have
ESTABLISHED,RELATED
in the table