iptables
Mike Wright
mike.wright at mailinator.com
Fri Nov 9 21:44:35 UTC 2007
Strong wrote:
> On Fri, 09 Nov 2007 08:17:44 +0900 John Summerfield
> <debian at herakles.homelinux.org> wrote:
>
>>He posted his rules to the list. His policy is accept, but he had a
>>global reject that would cause the message he saw.
>
>
> Where in the global reject was?
>
>
>>Does this help?
>># service iptables stop
>
> No. How it can help, if no route is specified?
>
> But I have changed to this:
> iptables -A FORWARD -s 192.168.0.0/24 -j ACCEPT
> iptables -A FORWARD -d 192.168.0.0/24 -j ACCEPT
> iptables -t nat -A POSTROUTING -o ppp0 -s 192.168.0.0/24 -j MASQUERADE
>
> and now it works. Weird that adding the last line (without 'iptables '
> at the line beginning, of course) to the iptables file did error message
> at iptables restart. But loaded from command line is fine. How I can
> save the rules to survive reboot? Is there a tool provided for the
> iptables configuration, not system-config-security?
>
from the command line: service iptables save
More information about the fedora-list
mailing list