Re: weird iptables behaviour

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Friday 2005-September-16 00:45, Grant Taylor wrote:
> > On the openvpn box, FORWARD policy is DROP, so I did
> > "iptables -I FORWARD -i tap0 -j ACCEPT" and thought this
> > should do the trick. But I was wrong. The only solutions I
>
> First of all you will need to have a corresponding rule:
>
> iptables -I FORWARD -o tap0 -j ACCEPT
>
> To allow traffic in the reverse direction too.

Better yet, the usual stateful rule:
iptables -I FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
-- 
    mail to this address is discarded unless "/dev/rob0"
    or "not-spam" is in Subject: header


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux