Any one can assist me providing iptables forwarding syntax.
2007-12-24 23:56:00
can any one help me with iptables syntax. here i attached my one, but i
think it's wrong.
Please help me. I am using one ethernet card with eth0 and alias eth0:0.
[root at xyz root]# more /etc/sysconfig/iptables
# Firewall configuration written by lokkit
# Manual customization of this file is not recommended.
# Note: ifup-post will punch the current nameservers through the
# firewall; such entries will *not* be listed here.
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:RH-Lokkit-0-50-FWDM - [0:0]
-A FORWARD -i 192.168.0.1 -o yyy.yyy.yyy.yyy
-A FORWARD -s 192.168.0.0/24 -j ACCEPT
-P FORWARD ACCEPT
#-A FORWARD -i 192.168.0.1 -p tcp -s 0.0.0.0 --dport 80 -j ACCEPT
#-A FORWARD -i 192.168.0.1 -p tcp -d 0.0.0.0 --sport 80 -j ACCEPT
:RH-Lokkit-0-50-INPUT - [0:0]
-A INPUT -j RH-Lokkit-0-50-INPUT
-A RH-Lokkit-0-50-INPUT -p tcp -m tcp --dport 25 --syn -j ACCEPT
-A RH-Lokkit-0-50-INPUT -p tcp -m tcp --dport 80 --syn -j ACCEPT
-A RH-Lokkit-0-50-INPUT -p tcp -m tcp --dport 21 --syn -j ACCEPT
-A RH-Lokkit-0-50-INPUT -p tcp -m tcp --dport 22 --syn -j ACCEPT
-A RH-Lokkit-0-50-INPUT -p tcp -m tcp --dport 23 --syn -j ACCEPT
-A RH-Lokkit-0-50-INPUT -i lo -j ACCEPT
-A RH-Lokkit-0-50-INPUT -i eth0 -j ACCEPT.......
thanks in advance..
bashar.
[demime 0.99c.7 removed an attachment of type image/gif which had a name of IMSTP.gif]
Comments
Got something to say?
You must be logged in to post a comment.
