Hi there, Im running iptables on redhat 9 I'm trying to figure out why some of my rules don't work and if they are being dropped and if so by which rule. First I tried to log everything with the following 2 lines iptables -A INPUT -j LOG iptables -A OUTPUT -j LOG which gave me zilcho in my /var/log/messages then I tried the following lines $IPTABLES -A INPUT -i $EXTERNAL_INT -j LOG --log-level debug $IPTABLES -A INPUT -i $INTERNAL_INT -j LOG --log-level debug $IPTABLES -A INPUT -i lo -j LOG --log-level debug $IPTABLES -A OUTPUT -o $EXTERNAL_INT -j LOG --log-level debug $IPTABLES -A OUTPUT -o $INTERNAL_INT -j LOG --log-level debug $IPTABLES -A OUTPUT -o lo -j LOG --log-level debug IPTABLES=/sbin/iptables EXTERNAL_INT=eth1 INTERNAL_INT=eth0 still zilcho logging the log rules are the first lines in my script the default policy that I set is drop $IPTABLES -t filter -P INPUT DROP $IPTABLES -t filter -P OUTPUT DROP $IPTABLES -t filter -P FORWARD DROP $IPTABLES -t nat -P PREROUTING DROP $IPTABLES -t nat -P POSTROUTING DROP $IPTABLES -t nat -P OUTPUT DROP $IPTABLES -t mangle -P PREROUTING DROP $IPTABLES -t mangle -P POSTROUTING DROP $IPTABLES -t mangle -P INPUT DROP $IPTABLES -t mangle -P OUTPUT DROP $IPTABLES -t mangle -P FORWARD DROP I also read that the following allows all the localtraffic $IPTABLES -A INPUT -i lo -j ACCEPT $IPTABLES -A OUTPUT -o lo -j ACCEPT but why can't I ping localhost????? Please Help Rob
