LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 08-25-2003, 12:04 AM   #1
huzz
LQ Newbie
 
Registered: Jul 2003
Posts: 12

Rep: Reputation: 0
Angry Problem with Iptable rules for Redhat 9


I have installed RH9 with Squid and Apache working on the same machine with 2 lan cards
I have genrated belowmentioned iptable with the help of webmin

The only problem it has is it does not allow me to ftp / ping outside.

Please check the Rules and Help me if you can with the same

# Generated by iptables-save v1.2.7a on Thu Aug 21 12:19:06 2003
*nat
:PREROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
-A POSTROUTING -o eth1 -j MASQUERADE
# Squid Redirect
-A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 3128
#COMMIT
# Completed on Thu Aug 21 12:19:06 2003
# Generated by iptables-save v1.2.7a on Thu Aug 21 12:19:06 2003
#*mangle
#:PREROUTING ACCEPT [11:1719]
#:INPUT ACCEPT [11:1719]
#:FORWARD ACCEPT [0:0]
#:OUTPUT ACCEPT [10:800]
#:POSTROUTING ACCEPT [10:800]
#COMMIT
# Completed on Thu Aug 21 12:19:06 2003
# Generated by iptables-save v1.2.7a on Thu Aug 21 12:19:06 2003
*filter
:FORWARD DROP [0:0]
:INPUT DROP [0:0]
:OUTPUT ACCEPT [0:0]
# Accept traffic from internal interfaces
-A INPUT ! -i eth1 -j ACCEPT
# Accept traffic with the ACK flag set
-A INPUT -p tcp -m tcp --tcp-flags ACK ACK -j ACCEPT
# Allow incoming data that is part of a connection we established
-A INPUT -m state --state ESTABLISHED -j ACCEPT
# Allow data that is related to existing connections
-A INPUT -m state --state RELATED -j ACCEPT
# Accept responses to DNS queries
-A INPUT -p udp -m udp --dport 1024:65535 --sport 53 -j ACCEPT
# Accept responses to our pings
-A INPUT -p icmp -m icmp --icmp-type echo-reply -j ACCEPT
# Accept notifications of unreachable hosts
-A INPUT -p icmp -m icmp --icmp-type destination-unreachable -j ACCEPT
# Accept notifications to reduce sending speed
-A INPUT -p icmp -m icmp --icmp-type source-quench -j ACCEPT
# Accept notifications of lost packets
-A INPUT -p icmp -m icmp --icmp-type time-exceeded -j ACCEPT
# Accept notifications of protocol problems
-A INPUT -p icmp -m icmp --icmp-type parameter-problem -j ACCEPT
# HTTP ACCESS
-A INPUT -p tcp -m tcp -i eth1 --dport 80 -j ACCEPT
COMMIT
# Completed on Thu Aug 21 12:19:06 2003
 
Old 08-25-2003, 12:06 AM   #2
huzz
LQ Newbie
 
Registered: Jul 2003
Posts: 12

Original Poster
Rep: Reputation: 0
Question One more small Query

Why does the iptable rules of redhat 7.3

does not work with redhat 9 ???????
 
Old 08-25-2003, 09:00 AM   #3
huzz
LQ Newbie
 
Registered: Jul 2003
Posts: 12

Original Poster
Rep: Reputation: 0
helloo guys

i need Help............

Please Spawn do something yaar
 
Old 08-25-2003, 11:04 AM   #4
Mathieu
Senior Member
 
Registered: Feb 2001
Location: Montreal, Quebec, Canada
Distribution: RedHat, Fedora, CentOS, SUSE
Posts: 1,403

Rep: Reputation: 46
All your rules seem good.

I suggest turning off iptables and then trying to ping / ftp in order to see if it works.
Code:
service iptables stop
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
IPTable rules RecoilUK Linux - Security 1 05-27-2005 08:25 PM
Remove iptable rules greenthing Linux - Networking 11 03-03-2005 09:15 AM
Help with IPtable Rules aqoliveira Linux - Security 3 12-10-2003 11:00 AM
iptable-rules for eDonkey? grubjo Linux - Networking 2 08-01-2002 07:38 AM
Iptable rules for Gnutella al_erola Linux - Security 5 03-06-2002 04:21 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 06:15 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration