On Thu, Aug 14, 2003 at 11:58:10PM +0530, Payal Rathod wrote: > Hi, > I have designed a simple firewall ruleset. Can someone please check > them? > It is kept at http://payal.staticky.com/firewall-1.txt Just a couple of points... You might want to include the interfaces in your rules... e.g. $IPTABLES -A INPUT -p tcp -i eth0 --dport 21 -j ACCEPT Also, -s 0/0 is the default, and does not need to be specified... Finally, the udp INPUT rules serve no purpose for FTP, SSH or HTTP :) Cheers, Gavin.