2013/1/3 Jorge Fábregas <jorge.fabregas@xxxxxxxxx>: > Ok, I've posted a similar setup I've used in the past that worked like a > charm. The script is the actual /etc/sysconfig/iptables. You'll notice > the syntax there is somehow different than when you manually create the > rules (or put in a script) but you get the idea. Those rules WERE THE > MINIMUM required in order to let a machine on internet reach a machine > on the internal network (port 8,555). Ask me any question if you don't > understand a line (please specify line number in question). > > eth0 is WAN, eth1 is LAN. Notice how I use "-i" and "-o" for the NICs. > > http://fpaste.org/sdPF/ > > Hi, Could you, please, post the actual config? If the configh which you posted worked for you, then we know there's no error in it. We need to see the one which has some, you know ;). It may be something really minor, like a typo, which is very difficult to spot if you read the text for the umpteenth time, and you know what you expect to read. It may be, that all it needs is just another pair of eyes. As far as what you posted goes, if that script worked for you, then replacing the port numbers and the destination IP with the ones you need for ssh would give you ssh connectivity. However, there are no holes punched in the INPUT chain for DNS or IMAP services, I suppose that the relevant lines are present in the file which we haven't seen yet. HTH, Paweł -- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
