Re: Bastille/netfilter with Linux 2.6.28 blocks connections

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Roland Häder wrote:
line 144: -A PUB_IN -s 192.168.1.0/24 -j LOG --log-prefix "PUB_IN DROP 8 "

says: 'PUB_IN DROP 8'

your log says: Jan 5 13:49:12 firebox kernel: INPUT DROP 8

this is not the rule matching in the log. otherwise it would say PUB_IN DROP 8 in your logs.
Okay please redownload this file:
http://www.mxchange.org/downloads/firebox/iptables.list

I have updated it. Output of "iptables -v" said version 1.4.2

Roland

ok,

your log says connections come into interface 'ppp0'.
those get dropped because there's no allow rule for them.
to do it with your configuration, you need two rules like:

-A INPUT -i ppp0 -j PUB_IN
-A OUTPUT -o ppp0 -j PUB_OUT

greets

mart



--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux