[rhn-users] Iptables - please verify

Rajesh singh singh.rajeshwar at gmail.com
Mon Nov 28 14:37:44 UTC 2005


Hi Geetha,
iptables is well understood, if you tell what rules you want to apply.
kindly write  the requirement for iptables.
That will make or editing rules easier.
Also, if you can tell me bit about your profile.
regards


On 11/22/05, Geetha Thanu <geetha_thanu at yahoo.co.in> wrote:
>
> Hello Gurus,
>
> I just want the iptables rules here to be verified as
> i am new to the rules.
>
> It is actually between 2 subnets only with in a LAN
>
> As i said early
>
> server subnet:  172.16.10.0 series
>
> Pc subnet    :  192.168.0.0  series
>
>
> the linux system as a fire wall between these 2
> subnets is
>
> eth0    172.16.10.250
>
> eth1    192.168.1.1
>
> #! /bin/bash
>
> # Load modules
>
> /sbin/modprobe ip_tables
>
>
> #Flush all old rules
>
> iptables -F
> iptables -X
> iptables -Z
>
> #Default Drop policy
>
> iptables -P INPUT DROP
> iptables -P  FORWARD DROP
> iptables -P OUTPUT DROP
>
> #ipforward
>
> /bin/echo "1" > /proc/sys/net/ipv4/ip_forward
>
> #allow traffic on the loopback
>
> iptables -A INPUT -i lo -j ACCEPT
> iptables -A OUTPUT -o lo -j ACCEPT
>
> #allow traffic from 192.16.0.0 subnet to proxy server
> in 172.16.0.0 subnet
>
> iptables -A FORWARD -s 192.16.0.0 -i eth1 -d
> 172.16.10.200 -o eth0 -p TCP --dport 9000 -j ACCEPT
>
>
> waiting for your replies
>
> Thanks
> Geetha
>
>
>
> __________________________________________________________
> Enjoy this Diwali with Y! India Click here
> http://in.promos.yahoo.com/fabmall/index.html
>
> _______________________________________________
> rhn-users mailing list
> rhn-users at redhat.com
> https://www.redhat.com/mailman/listinfo/rhn-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/rhn-users/attachments/20051128/dbded95b/attachment.htm>


More information about the rhn-users mailing list