Re: state ESTABLISHED,RELATED ignored within a bridge

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thu, 2006-01-05 at 17:02 +0100, DELORT Stephane wrote:
>
>  when I use a rule :
>    $IPTABLES -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
>    $IPTABLES -A INPUT -j DROP
> 
>  The server cannot ping or telnet any other host ! 

This only lets replies back through. You need a rule that permits the
initial session establishment as well. (ICMP type 8 and TCP/23).

HTH,
Chris




[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux