Re: [suse-security] allow EXCEPT (SuSEfirewall2)

Philippe Vogel wrote:

iptables -A INPUT -j ACCEPT -s $ok1 -p tcp -d $server.to.allow 80 -i $int ^^^^^ must read FORWARD if the firewall isn't $server.to.allow.

done iptables -A INPUT -j DENY -s 192.168.0.0/24 -p tcp -d $server.to.allow ^^^^^ ^^^^ The same here, s/INPUT/FORWARD/. And, DENY is ok if you're using ipchains, but using iptables it must be DROP. Paranoiac_User made the same mistake.

GTi