iptables newbie.

bscott at ntisys.com bscott at ntisys.com
Sun Jun 8 18:29:11 EDT 2003


On Sun, 8 Jun 2003, at 3:18pm, cbrenton at chrisbrenton.org wrote:
> iptables -A FORWARD -i eth1 -m state --state NEW -d 0/0 -j ACCEPT
> iptables -A INPUT -i eth1 -m state --state NEW -d 0/0 -j ACCEPT
> iptables -A INPUT -i lo -m state --state NEW -d 127.0.0.1 -j ACCEPT
> iptables -A OUTPUT -m state --state NEW -s 0/0 -d 0/0 -j ACCEPT

  FYI, the "0/0" bits are redundent.  If you don't specify a source or
destination address, the default is to always match.

-- 
Ben Scott <bscott at ntisys.com>
| The opinions expressed in this message are those of the author and do  |
| not represent the views or policy of any other person or organization. |
| All information is provided without warranty of any kind.              |







More information about the gnhlug-discuss mailing list