Re: [suse-security] SuSEfirewall2 v1.6 question? FAQ?
Hi Tall0n On 2001.08.27 18:41:42 +0100 Tall0n wrote:
What I actually added was the below line:
iptables -A input -i eth1 -s 192.168.150.0/24 -d 216.27.164.230 -j ACCEPT
however, It didn't work. This is what the last line of the input chain looks like.
Chain INPUT (policy DROP) ********* ACCEPT all -- 192.168.150.0/24 Tall0n.GregWorld.com ??? Tall0n
My mistake :) Try *inserting* this rule earlier in the chain : iptables -I input 1 -i eth1 -s 192.168.150.0/24 -d 216.27.164.230 -j ACCEPT If you have a rule to drop the packets before the end of the chain, then adding a rule to allow them won't work - the packets are already dropped! By inseting the new rule at position 1, you are sure the packets will see the new rule... HTH, Maf. -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Maf. King Standby Exhibition Services maf@standby.co.uk http://www.standby.co.uk/ Tel.: 0118 969 7562 (Reading Office) : 0115 922 1894 (Nottingham Office) : 07860 182793 (Mobile) Fax.: 0118 969 7113 / 0115 922 1894 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ "It is easier to do a job right than to explain why you didn't." - Martin Van Buren ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
participants (1)
-
maf king