Hi Geetha, iptables is well understood, if you tell what rules you want to apply. kindly write the requirement for iptables. That will make or editing rules easier. Also, if you can tell me bit about your profile. regards <div>On 11/22/05, Geetha Thanu <<a href="mailto:geetha_thanu@yahoo.co.in">geetha_thanu@yahoo.co.in</a>> wrote:<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> Hello Gurus, I just want the iptables rules here to be verified as i am new to the rules. It is actually between 2 subnets only with in a LAN As i said early server subnet: <a href="http://172.16.10.0"> 172.16.10.0</a> series Pc subnet : <a href="http://192.168.0.0">192.168.0.0</a> series the linux system as a fire wall between these 2 subnets is eth0 <a href="http://172.16.10.250">172.16.10.250 </a> eth1 <a href="http://192.168.1.1">192.168.1.1</a> #! /bin/bash # Load modules /sbin/modprobe ip_tables #Flush all old rules iptables -F iptables -X iptables -Z #Default Drop policy iptables -P INPUT DROP iptables -P FORWARD DROP iptables -P OUTPUT DROP #ipforward /bin/echo "1" > /proc/sys/net/ipv4/ip_forward #allow traffic on the loopback iptables -A INPUT -i lo -j ACCEPT iptables -A OUTPUT -o lo -j ACCEPT #allow traffic from <a href="http://192.16.0.0">192.16.0.0</a> subnet to proxy server in <a href="http://172.16.0.0">172.16.0.0</a> subnet iptables -A FORWARD -s <a href="http://192.16.0.0">192.16.0.0</a> -i eth1 -d <a href="http://172.16.10.200">172.16.10.200</a> -o eth0 -p TCP --dport 9000 -j ACCEPT waiting for your replies Thanks Geetha __________________________________________________________ Enjoy this Diwali with Y! India Click here <a href="http://in.promos.yahoo.com/fabmall/index.html">http://in.promos.yahoo.com/fabmall/index.html </a> _______________________________________________ rhn-users mailing list <a href="mailto:rhn-users@redhat.com">rhn-users@redhat.com</a> <a href="https://www.redhat.com/mailman/listinfo/rhn-users">https://www.redhat.com/mailman/listinfo/rhn-users </a> </blockquote></div>