> Hi, > I've a problem with iptables on a machine which is a firewall. The logs > reports the following thing: > > firewall:~ # grep 192.168.2.200 /var/log/messages | grep DPT=53 > Feb 14 11:45:52 firewall kernel: PUPPUFIREWALLIN=eth1 OUT=eth1 > SRC=192.168.2.200 DST=217.97.32.2 LEN=50 TOS=0x00 PREC=0x00 TTL=126 ID=9 > PROTO=UDP SPT=1025 DPT=53 LEN=30 > Feb 14 11:47:40 firewall kernel: PUPPUFIREWALLIN=eth1 OUT=eth1 > SRC=192.168.2.200 DST=217.97.32.2 LEN=72 TOS=0x00 PREC=0x00 TTL=126 ID=812 > PROTO=UDP SPT=1025 DPT=53 LEN=52 > > where the machine 192.168.2.200 is locked and cannot work with the DNS (port > 53) specified. But if I try to do an iptables-save, I got the following: > > -A FORWARD -s 192.168.2.0/255.255.255.0 -d 212.97.32.2 -i eth1 -o eth1 -p tcp > -m tcp --dport 53 -j ACCEPT > The Input interface and output Interface are the same eth1, where as it should have been -i eth0 -o eth1. Match ur interface numbers and it should work. Regards - : send the line "unsubscribe linux-admin" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
