>> ACCEPT all -- anywhere anywhere >> This converts your DROP policy to an ACCEPT, doesn't seem wise. >Remember that iptables -L hides some rule parameters such as interfaces. >I would not be surprised that this rule actually contains "-i eth1". >I strongly suggest John and anyone lists iptables rules with> >iptables-save instead of iptables -L. Or iptables -L -n -v would do fine too, I think.