Tightening up outgoing traffic

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



All:

On Tue, 2002-10-15 at 05:47, Neil Hodge wrote:
> All:
> 
> When I change to this:
> 
> iptables -P OUTPUT DROP
> iptables -A OUTPUT -p tcp --destination-port http -j ACCEPT
> 
> I keep getting "domainname can not be found.  Please check the name
and
> try again" from my browser.  This only happens for new web sites
(i.e.,
> Yahoo works fine).  As this seems somewhat like a DNS issue, I tried
> adding this:
> 
> iptables -A OUTPUT -p tcp --destination-port nameserver -j ACCEPT
> 
> but it didn't work.  Any ideas?  Thanks.
> 
> Neil Hodge
> 

Thanks for all of the information.  It worked well.  Although, when I
had to reboot (for another reason), X wouldn't start . . .  Alas, that's
a battle for another day.

Thanks!

Neil





[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux