  | | | iptables "turted device " | iptables "turted device " 2004-07-23 - By Pekka K. Kurki
Back
Ajai Khattri schrieb:
>On Thu, 22 Jul 2004, Mike Burger wrote: > > > >>With that rule, it looks to me like you're going to accept anything that >>hits eth0, no matter where it comes from. >> >>On Thu, 22 Jul 2004, Pekka K. Kurki wrote: >> >> >> >>>When I define in iptables >>> >>>-A RH-Lokkit-0 (See http://kit-0.ora-code.com)-50-INPUT -i eth0 -j ACCEPT >>> >>> > >Though, the RH-Lokkit-0 (See http://kit-0.ora-code.com)-50-INPUT chain could contain blocking rules so >that's no necessarily true. > >To be sure we need to see the output of "iptables -L -n" > > >
After dome tests and log reading it looks like Mike said it would be... I replaced the line by
-A RH-Lokkit-0 (See http://kit-0.ora-code.com)-50-INPUT -s 192.168.0.0/24 -d 0/0 -j ACCEPT
and now it looks OK....
Thands for help
br, Pekka!
(Mr.) Pekka K. Kurki Intellectics GesmbH http://www.intellectics.at, http://www.intellectics.com
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <meta content="text/html;charset=ISO-8859 (See http://ISO-8859.ora-code.com)-1" http-equiv="Content-Type"> <title></title> </head> <body bgcolor="#ffffff" text="#000000"> <br> Ajai Khattri schrieb: <blockquote cite="midPine.BSO.4.58.0407230915210.14437@(protected)" type="cite"> <pre wrap="">On Thu, 22 Jul 2004, Mike Burger wrote:
</pre> <blockquote type="cite"> <pre wrap="">With that rule, it looks to me like you're going to accept anything that hits eth0, no matter where it comes from.
On Thu, 22 Jul 2004, Pekka K. Kurki wrote:
</pre> <blockquote type="cite"> <pre wrap="">When I define in iptables
-A RH-Lokkit-0 (See http://kit-0.ora-code.com)-50-INPUT -i eth0 -j ACCEPT </pre> </blockquote> </blockquote> <pre wrap=""><!----> Though, the RH-Lokkit-0 (See http://kit-0.ora-code.com)-50-INPUT chain could contain blocking rules so that's no necessarily true.
To be sure we need to see the output of "iptables -L -n"
</pre> </blockquote> <br> After dome tests and log reading it looks like Mike said it would be... I replaced the line by<br> <br> -A RH-Lokkit-0 (See http://kit-0.ora-code.com)-50-INPUT -s 192.168.0.0/24 -d 0/0 -j ACCEPT<br> <br> and now it looks OK....<br> <br> Thands for help<br> <br> br,<br> Pekka!<br> <br> <pre class="moz-signature" cols="72">(Mr.) Pekka K. Kurki Intellectics GesmbH <a class="moz-txt-link-freetext" href="http://www.intellectics.at">http://www .intellectics.at</a>, <a class="moz-txt-link-freetext" href="http://www .intellectics.com">http://www.intellectics.com</a>
</pre> </body> </html>
-- Shrike-list mailing list Shrike-list@(protected) https://www.redhat.com/mailman/listinfo/shrike-list
|
|
 |