Firewall settings

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I just followed the instructions in 'Red Hat Linux 8 For Dummies' to
setup a firewall.  

For some reason it doesn't work.

The book uses an example for a modem, but I need to make it work for an
Ethernet.  There is only one NIC in the computer and the LAN going to
the internet is connected to it.

I tried it verbatim to the book and failed. One line has an error so I
changed it.  The changed line is marked with an asterisk.

iptables --flush
iptables --flush -t nat
iptables -A INPUT -j DROP
iptables -A OUTPUT -j DROP
iptables -A OUTPUT -j ACCEPT -o lo
iptables -A INPUT j ACCEPT -i lo
* iptables -A INPUT -j ACCEPT -i lo
iptables -A OUTPUT -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT

When I turn off the firewall, I can access the internet, but with it on,
I cannot access the internet.

My status of iptables is:

Chain INPUT (policy ACCEPT)
Target	prot	opt	source		destination	
DROP		all	--	anywhere		anywhere
ACCEPT	all	--	anywhere		anywhere
ACCEPT	all	--	anywhere		anywhere	state
RELATED,ESTABLISHED

Chain FOREWARD (policy ACCEPT)
Target	prot	opt	source		destination	

Chain INPUT (policy ACCEPT)
Target	prot	opt	source		destination	
DROP		all	--	anywhere		anywhere
ACCEPT	all	--	anywhere		anywhere
ACCEPT	all	--	anywhere		anywhere	state
NEW,RELATED,ESTABLISHED

Chain RH-Lokkit-0-50-INPUT (0 references)
Target	prot	opt	source		destination	


I have tried /etc/init.d/iptables start and I have no access to the
internet, but when I do "stop" instead, I have full access so I am
positive it is the firewall.

Thanks for the help,

Buck





-- 
Psyche-list mailing list
Psyche-list@redhat.com
https://listman.redhat.com/mailman/listinfo/psyche-list

[Index of Archives]     [Fedora General Discussion]     [Red Hat General Discussion]     [Centos]     [Kernel]     [Red Hat Install]     [Red Hat Watch]     [Red Hat Development]     [Red Hat 9]     [Gimp]     [Yosemite News]

  Powered by Linux