Re: Need Help IPTABLES RH8

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



check the ipv4 foward line in /etc/sysctl.conf .... it needs to be changed from 0 -> 1

then run "sysctl -p"


Tommy

--On Tuesday, December 03, 2002 07:05:49 PM -0500 Pablo Allietti <pabloa@inia.org.uy> wrote:

Hi i have a problem with iptables in RH8.

I still have a firewall function in rh7 but in the time to upgrade to 8,
the machines behind a firewall dont access to INTERNET.

my private network dont have access to outside. This is my old iptables
please help me!!!!


-A FORWARD -j ACCEPT -i eth0 -o eth0 -d 0/0
# -A FORWARD -i eth0 -m state --state NEW,INVALID -j DROP
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p tcp -m tcp --dport 25 --syn -j ACCEPT
-A INPUT -p tcp -m tcp --dport 80 --syn -j ACCEPT
-A INPUT -p tcp -m tcp --dport 22 --syn -j ACCEPT
-A INPUT -p tcp -m tcp --dport 53 --syn -j ACCEPT
-A INPUT -p tcp -m tcp --dport 110 --syn -j ACCEPT
-A INPUT -p tcp -m tcp --dport 143 --syn -j ACCEPT
-A INPUT -p tcp -m tcp --dport 953 --syn -j ACCEPT
-A INPUT -p tcp -m tcp --dport 443 --syn -j ACCEPT
-A INPUT -p udp --sport 137 --dport 137 -j DROP

and

/sbin/iptables --table nat --delete-chain
/sbin/iptables --table nat --append POSTROUTING --out-interface eth0:0
-j MASQUERADE
/sbin/iptables --append FORWARD --in-interface eth0 -j ACCEPT



--
Psyche-list mailing list
Psyche-list@redhat.com
https://listman.redhat.com/mailman/listinfo/psyche-list


--
Tommy McNeely         --        Tommy.McNeely@Sun.COM
Sun Microsystems - IT Ops - Broomfield Campus Support
Phone:  x50888 / 303-464-4888  --  Fax:  720-566-3168



--
Psyche-list mailing list
Psyche-list@redhat.com
https://listman.redhat.com/mailman/listinfo/psyche-list

[Index of Archives]     [Fedora General Discussion]     [Red Hat General Discussion]     [Centos]     [Kernel]     [Red Hat Install]     [Red Hat Watch]     [Red Hat Development]     [Red Hat 9]     [Gimp]     [Yosemite News]

  Powered by Linux