[Cialug] iptables restart?

L. V. Lammert lvl at omnitec.net
Wed Dec 14 15:20:06 CST 2011


On Wed, 14 Dec 2011, kristau wrote:

> If the rc script for iptables configuration is written correctly, it
> should start with a bunch of entries that "flush" out the current
> configuration prior to applying the rules that follow. Therefore, if
> you make changes to those rules, you should just be able to re-run the
> rc script to apply those changes.
>
TFTR! The rule:

$IPTABLES -A FORWARD -p TCP -i $EXTIF -d $MSTS1 --dport 80 -o $INTIF -j
ACCEPT

*Appears* to be interpreted correctly:

ACCEPT  tcp opt -- in eth1 out eth0  0.0.0.0/0  -> 10.0.0.100  tcp dpt:80

BUT there is no port open in netstat and the port forward dnw. Is there
anything simple I'm missing? I don't use iptables a lot, ..

	Lee


More information about the Cialug mailing list