Hi. i have the following machines: [Router] <=> [Server] I have a Apache with virtual hosts by name working properly in the server. But when i 'turn on' iptables, it's impossible to connect to ANY page. iptables -S -P INPUT ACCEPT -P FORWARD ACCEPT -P OUTPUT ACCEPT -A INPUT -s public_ip_pc_132 -i eth0 -p tcp -m tcp --dport 22 -j ACCEPT -A INPUT -s public_ip_pc_132 -i eth0 -p tcp -m tcp --dport 443 -j ACCEPT -A INPUT -s 192.168.1.31/32 -i eth0 -p tcp -m tcp --dport 22 -j ACCEPT -A INPUT -s public_ip_pc_2/32 -i eth0 -p tcp -m tcp --dport 22 -j ACCEPT -A INPUT -s public_ip_pc_2/32 -i eth0 -p tcp -m tcp --dport 443 -j ACCEPT -A INPUT -s public_ip_pc_3/32 -i eth0 -p tcp -m tcp --dport 22 -j ACCEPT -A INPUT -s public_ip_pc_3/32 -i eth0 -p tcp -m tcp --dport 443 -j ACCEPT -A INPUT -s 192.168.1.30/32 -i eth0 -p tcp -m tcp --dport 22 -j ACCEPT -A INPUT -i eth0 -p tcp -m tcp --dport 80 -j ACCEPT -A INPUT -i eth0 -p tcp -m tcp --sport 80 -j ACCEPT -A INPUT -i eth0 -p tcp -m tcp --dport 4080 -j ACCEPT -A INPUT -i eth0 -p udp -m udp --dport 4080 -j ACCEPT -A INPUT -i eth0 -p tcp -m tcp --dport 21 -j ACCEPT -A INPUT -i eth0 -p udp -m udp --dport 21 -j ACCEPT -A INPUT -i eth0 -p udp -m udp --sport 53 -j ACCEPT -A INPUT -i eth0 -p tcp -m tcp --sport 23 -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -j REJECT --reject-with icmp-port-unreachable -A FORWARD -p tcp -m tcp --dport 9999 -j ACCEPT -A FORWARD -p tcp -m tcp --dport 6882 -j ACCEPT -A FORWARD -p udp -m udp --dport 5865 -j ACCEPT -A FORWARD -p tcp -m tcp --dport 5865 -j ACCEPT -A FORWARD -p udp -m udp --dport 8443 -j ACCEPT -A FORWARD -p tcp -m tcp --dport 8443 -j ACCEPT -A FORWARD -p udp -m udp --dport 4666 -j ACCEPT -A FORWARD -p tcp -m tcp --dport 4662 -j ACCEPT -A FORWARD -j REJECT --reject-with icmp-port-unreachable Can anybody tells me the right rule to allow iptables filter http traffic (remember the virtual host setting)? Thanks in advice. Javier -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
