Go Back   Pro/Forums > ProCooling Geek Bits > Random Nonsense / Geek Stuff
Password
Register FAQ Members List Calendar JavaChat Mark Forums Read

Random Nonsense / Geek Stuff All those random tech ramblings you can't fit anywhere else!

Reply
Thread Tools
Unread 07-22-2002, 11:47 AM   #1
ViperSTD
Cooling Neophyte
 
ViperSTD's Avatar
 
Join Date: Jun 2002
Location: USA
Posts: 9
Linux Firewall: IPTABLES and Loopback


I can't get my iptables set up correctly. It seems to work perfectly except that the loopback is being denied.

I have tried the two following configurations to no avail:
-------------------Configuration 1--------------------------
## Loop Back ##
/sbin/iptables -A INPUT -p tcp --syn -s 127.0.0.1 -j ACCEPT

######## Deny Everything else ########
/sbin/iptables -A INPUT -j DROP

-------------------Configuration 2----------------------------
## Loop Back ##
/sbin/iptables -A INPUT -i lo -j ACCEPT

######## Deny Everything else ########
/sbin/iptables -A INPUT -j DROP

Could someone please shed some light on this for me?

TIA
ViperSTD is offline   Reply With Quote
Unread 07-22-2002, 12:34 PM   #2
ViperSTD
Cooling Neophyte
 
ViperSTD's Avatar
 
Join Date: Jun 2002
Location: USA
Posts: 9
Default

Well, I got the loopback working (sortof) I can ping myself now but no one else can. Unfortunately, that still hasn't fixed my mail server problems.

Ah, if only Linux were a microsoft product.
ViperSTD is offline   Reply With Quote
Unread 07-23-2002, 11:12 AM   #3
MeltMan
Cooling Savant
 
MeltMan's Avatar
 
Join Date: Aug 2001
Location: KS
Posts: 374
Default

If linux were a microsoft product, you would have shelled out $200 for it, and it would be buggy, uncustomizable, and evil.
__________________
MeltMan
Lurker Supreme!
MeltMan is offline   Reply With Quote
Unread 07-23-2002, 07:16 PM   #4
Boltz
Cooling Neophyte
 
Boltz's Avatar
 
Join Date: Jul 2002
Location: Vancouver BC Canada
Posts: 23
Default

if you start off by setting the default policy to DENY on the

IN
OUT
and
FORWARD

then you have to set specific rules to allow wanted traffic through the firewall to the corresponding interface.

If you wanted to allow the LOOP back you simply do something like this (not sure if it is correct)

iptables -A INPUT -i lo -j ACCEPT
iptables -A OUTPUT -i lo -j ACCEPT

as for the others it may take some more thought as to who and what you want to access the interfaces
Boltz is offline   Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -5. The time now is 05:16 PM.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2025, Jelsoft Enterprises Ltd.
(C) 2005 ProCooling.com
If we in some way offend you, insult you or your people, screw your mom, beat up your dad, or poop on your porch... we're sorry... we were probably really drunk...
Oh and dont steal our content bitches! Don't give us a reason to pee in your open car window this summer...