Re: eth1 answers SYN/ACK to SYNs dedicated for eth0. Why?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Wed, 2004-12-15 at 18:07, Stoycho Sleptsov wrote:
> Hi.
> 
> I am new to iptables , so excuse me in advance for any strange
> terminologies.
> 
> I have the following configuration:
> an external IP assigned to eth0.
> 192.168.0.1 assigned to eth1.
> ip_forward set to 1.
> sshd waiting on 22.
> 
> iptables:
> 
> *filter
> :INPUT DROP
> :FORWARD DROP
> :OUTPUT ACCEPT
> 
> -A INPUT -i eth1 -j ACCEPT

change that to:

  -A INPUT -i eth1 -d $ip_of_eth1 -j ACCEPT

and packets that arrive on eth1 destined for eth0's IP address won't be
accepted anymore.
 
-j

--
"I saw weird stuff in that place last night. Weird, strange, sick,
 twisted, eerie, godless, evil stuff. And I want in."
	--The Simpsons



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux