Problem with Firewall

jludwig wralphie at comcast.net
Sun Oct 3 21:56:49 UTC 2004


On Thu, 2004-09-30 at 02:30, TongKe Xue wrote:
> Hi all,
> 
>  I'm using the iptables config from:
> http://www.netfilter.org/documentation/HOWTO//packet-filtering-HOWTO-5.html
> 
>  Now, when I try that, apparently KDE and GNOME both refuses to start
> -- do they run some kind of server and then connect to it? How can I
> fix this?
> 
>  (Worked fine on RH9; but apparently refuses to work on FC2).
> 
> To make it easier to respond; the section I'm referring to is:
> 
> --BEGIN QUOTE--
> ## Insert connection-tracking modules (not needed if built into kernel).
> # insmod ip_conntrack
> # insmod ip_conntrack_ftp
> 
> ## Create chain which blocks new connections, except if coming from inside.
> # iptables -N block
> # iptables -A block -m state --state ESTABLISHED,RELATED -j ACCEPT
> # iptables -A block -m state --state NEW -i ! ppp0 -j ACCEPT
> # iptables -A block -j DROP
> 
> ## Jump to that chain from INPUT and FORWARD chains.
> # iptables -A INPUT -j block
> --END QUOTE--
> 
> 
> On Wed, 29 Sep 2004 23:24:41 -0700, TongKe Xue <tongke at gmail.com> wrote:
> > Hi all,
> > 
> >   I'm using the iptables config from:
> > http://www.netfilter.org/documentation/HOWTO//packet-filtering-HOWTO-5.html

If I remember try adding;
iptables -P OUTPUT ACCEPT
iptables -I OUTPUT -o lo ACCEPT

-- 
jludwig <wralphie at comcast.net>




More information about the fedora-list mailing list