Anatoly Muliarski wrote:
Hi,
You should remove -m state --state NEW statements because they track
only START of connections.
Or you can accept the established and related _before_ to the other rules.
$IPTABLES -I INPUT 1 [FORWARD] -m state --state RELATED,ESTABLISHED -j
ACCEPT
However, can you send us the log that drop the traffic on the rule_39 ?
Michele
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html