From: Fwd need some tipps for iptable-konfiguration
On Monday 09 June 2003 21:31, Ruprecht Helms wrote: > Hi, > > I need some help to fix some missconfiguration in the following > iptables-script. > ... > > #INPUT > iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT > iptables -A INPUT -i lo -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT > iptables -A INPUT -i eth0 -m state --state NEW,ESTABLISHED -j ACCEPT This IMHO allows all connections to your box (except icmp, which is dropped above).
On Monday 09 June 2003 21:31, Ruprecht Helms wrote:
> Hi,
>
> I need some help to fix some missconfiguration in the following
> iptables-script.
>
...
>
> #INPUT
> iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
> iptables -A INPUT -i lo -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
> iptables -A INPUT -i eth0 -m state --state NEW,ESTABLISHED -j ACCEPT
This IMHO allows all connections to your box (except icmp, which is dropped above).