Doubt about iptables rules.

Gawain Lynch gawain.lynch at bigpond.com
Wed May 31 04:41:47 UTC 2006


On Tue, 2006-05-30 at 23:22 -0300, Vinicius wrote:
> Hello,
> 
> On the chain RH-Firewall-1-INPUT, what's the mean of the rules number 1
> and 2, please?
> 
[SNIP]
> 
> Chain RH-Firewall-1-INPUT (2 references)
> num  target     prot opt source               destination
> 1    ACCEPT     all  --  anywhere             anywhere
> 2    ACCEPT     icmp --  anywhere             anywhere            icmp any
> "

If you try "iptables -L -v" you will see that number 1 is to allow all
traffic on the loopback adapter (lo) 

As for line number 2, this accepts *all* ICMP traffic.  Not ideal, just
the way it is  :-)






More information about the fedora-list mailing list