Hi All, I recently redid my home gateway/NAT box with debian 3.1, and everything looked to be working fine until I did a quick scan on it from outside to test the firewall. All the services running appeared to be exposed. Checking my rules with iptables -L, I found that for some reason, everywhere I had specified a physical interface, it had been replaced by ANYWHERE. For example, the following rule: iptables -A INPUT -m state --state NEW -i ! $EXTIF -j ACCEPT Ends up appearing in the iptables -L list as: target prot opt source destination ACCEPT all -- anywhere anywhere state NEW Needless to say, this doesn't make for a very good situation. Has anyone ever seen a problem like this before? Any suggestions would be greatly appreciated. Thanks, Grant
