![]() |
Hello and Welcome from United States to the UNIX and Linux Forums! Thank You for Visiting and Joining Our Global Community.
|
|
google unix.com
|
|||||||
| Forums | Register | Forum Rules | Links | Albums | FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
| IP Networking Learn TCP/IP, Internet Protocol, Routing, Routers, Network protocols in this UNIX and Linux forum. |
More UNIX and Linux Forum Topics You Might Find Helpful
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| hardware assistance | paulbryant | SUN Solaris | 4 | 05-27-2008 01:15 PM |
| While Loop assistance. | MaestroRage | UNIX for Dummies Questions & Answers | 2 | 02-05-2008 06:30 PM |
| I need an assistance | mytilini boy | Shell Programming and Scripting | 1 | 05-25-2007 08:42 PM |
| KSH Script Assistance | Brusimm | Shell Programming and Scripting | 3 | 05-10-2007 08:15 AM |
| Need Assistance | yahoo14 | UNIX for Dummies Questions & Answers | 1 | 06-08-2006 10:21 AM |
![]() |
|
|
LinkBack | Thread Tools | Search this Thread | Rate Thread | Display Modes |
|
||||
|
iptables assistance
I have a CentOS 5.2 (10.20.21.73) machine that I need help with configuring iptables. According to documentation I believe this line should allow all communication between my machine and another machine (other machine has no firewall)
-A RH-Firewall-1-INPUT -s 10.20.21.12 -j ACCEPT # /etc/sysconfig/iptables *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] :RH-Firewall-1-INPUT - [0:0] -A INPUT -j RH-Firewall-1-INPUT -A FORWARD -j RH-Firewall-1-INPUT -A RH-Firewall-1-INPUT -i lo -j ACCEPT -A RH-Firewall-1-INPUT -p icmp --icmp-type any -j ACCEPT -A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT -A RH-Firewall-1-INPUT -s 10.20.21.12 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT -A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited COMMIT |
|
||||
|
Fixed
Ahh, after much fiddling around with different configurations, I found the answer.
Needed my subnet on the source, 10.x.x.x/255.255.255.0 solved the problem. |
| Sponsored Links | ||
|
|
![]() |
| Bookmarks |
| Thread Tools | Search this Thread |
| Display Modes | Rate This Thread |
|
|