Thanks for both replies. The graphic does it a lot more understandable. Is there any way to debug iptables, I mean, like a tool where I can visualize the path of a packet and where exactly it gets dropped/accepted and also realtime packets headers (src, dst, proto, dport, sport, etc)? On Sat, Aug 25, 2012 at 12:56 PM, Corrado Primier <ilbardo@xxxxxxxxx> wrote: > 2012/8/25 Juan Diego Tascón <juantascon@xxxxxxxxx>: >> Good day, > > Hello :) > >> I'm thinking of >> setting the default FORWARD policy to ACCEPT as my default INPUT >> policy is DROP and unless there is a valid FORWARD rule for a given >> port the packets wont go anywhere. I'm I right on this? > > You're wrong. Either a packet goes through the INPUT chain or it goes > through the FORWARD chain, depending on its destination. Take a look > at this packet flow diagram: > http://www.linuxhomenetworking.com/wiki/images/f/f0/Iptables.gif > > Corrado
