iptables problem

tamer amr tamer_linux at yahoo.com
Wed Dec 20 12:52:07 UTC 2006


hi i want to check the error and the recommendadtions in my iptables rules
  
  here is 
  
  Chain INPUT (policy DROP)
  target     prot opt source               destination
  ACCEPT     all  --  anywhere             anywhere            state NEW
  ACCEPT     all  --  anywhere             anywhere            state RELATED,ESTABLISHED
  ACCEPT     tcp  --  anywhere             anywhere            tcp spt:http
  ACCEPT     tcp  --  anywhere             anywhere            tcp spt:imap
  ACCEPT     tcp  --  anywhere             anywhere            tcp spt:domain
  ACCEPT     tcp  --  anywhere             anywhere            tcp spt:bootps
  ACCEPT     tcp  --  anywhere             anywhere            tcp spt:https
  LOG        all  --  anywhere             anywhere            LOG level warning
  ACCEPT     tcp  --  192.168.1.0/24       anywhere            tcp dpt:smtp
  ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:smtp state NEW
  DROP       tcp  --  anywhere             anywhere            tcp flags:!FIN,SYN,RST,ACK/SYN state NEW
  
  Chain FORWARD (policy ACCEPT)
  target     prot opt source               destination
  ACCEPT     all  --  anywhere             anywhere
  ACCEPT     all  --  anywhere             anywhere
  DROP       tcp  --  anywhere             anywhere            tcp spt:31337 dpt:31337
  
  Chain OUTPUT (policy ACCEPT)
  target     prot opt source               destination
  ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:bootps
  ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:http
  ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:domain
  ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:https
  ACCEPT     tcp  --  anywhere             anywhere            tcp spt:http state RELATED,ESTABLISHED
  ACCEPT     tcp  --  192.168.1.0/24       anywhere            tcp dpt:smtp
  DROP       tcp  --  anywhere             anywhere            tcp spt:31337 dpt:31337
 __________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 


More information about the redhat-list mailing list