Can someone help me find out why is this rule does not work? *filter :INPUT DROP [1803:271102] :FORWARD DROP [0:0] :OUTPUT DROP [0:0] -A INPUT -i lo -j ACCEPT -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT -A INPUT -p tcp -m tcp --dport 22 -j ACCEPT -A INPUT -p tcp -m tcp --dport 25 -j ACCEPT -A INPUT -p tcp -m tcp --dport 53 -j ACCEPT -A INPUT -p udp -m udp --dport 53 -j ACCEPT -A INPUT -p tcp -m tcp --dport 80 -j ACCEPT -A INPUT -p icmp -j ACCEPT -A INPUT -p tcp -j REJECT --reject-with tcp-reset -A INPUT -p tcp --syn -m limit --limit 5/s -i eth0 -j ACCEPT -A FORWARD -p tcp -i eth0 -s xxx.xxx.xxx.xxx/28 -o eth1 -d yyy.yyy.yyy.yyy -j ACCEPT -A FORWARD -j LOG Where xxx.xxx.xxx.xxx is a real network that should be allowed to contact the server yyy.yyy.yyy.yyy both of which are having real IP's. -- Stratos stratism@xxxxxxxxx
Attachment:
pgptdKbYyIdXa.pgp
Description: PGP signature
