Article View: linux.redhat.misc
Article #34Re: VPN Behind a redhat 7.3 gateway
From: Michael Hart
Date: Thu, 10 Apr 2003 23:13
Date: Thu, 10 Apr 2003 23:13
23 lines
2500 bytes
2500 bytes
"Michael Hart" <mixstat-donotspam@bigpond.net.au> wrote in message news:J4lla.7722$1h6.62828@news-server.bigpond.net.au... > Thanks Joerg, > > I have catchall rules for INPUT and OUTPUT packets for logging > $IPTABLES -A INPUT -s $UNIVERSE -d $UNIVERSE -j drop-and-log-it > $IPTABLES -A OUTPUT -s $UNIVERSE -d $UNIVERSE -j drop-and-log-it I also have catchall rules on the FORWARD chain like $IPTABLES -A FORWARD -j drop-and-log-it When I make a rule before it saying $IPTABLES -A FORWARD -i $INTIF -o $INTIF -j ACCEPT (allowing forwarding on the internal inferface both into and outf the linux box) Most of the stuff that is logged dissappears - but I still don't get a connection. Could this be because return packets are not automatically NATed back to the originating computer? Michael
Technical Details
Message-ID:
<XUmla.8318$1h6.63694@news-server.bigpond.net.au>Path:
arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!nntp.cs.ubc.ca!nntp-relay.ihug.net!ihug.co.nz!abnormal.com!vicpull2.telstra.net!lon-transit.news.telstra.net!news.telstra.net!news-server.bigpond.net.au!not-for-mailReferences:
<d86la.5914$1h6.50238@news-server.bigpond.net.au> <b73k9i$akska$1@ID-162417.news.dfncis.de> <J4lla.7722$1h6.62828@news-server.bigpond.net.au>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: fa2c1,ec6ca9a44d72332 X-Google-Attributes: gidfa2c1,public X-Google-Thread: 111240,ec6ca9a44d72332 X-Google-Attributes: gid111240,public X-Google-Thread: 102983,ec6ca9a44d72332 X-Google-Attributes: gid102983,public X-Google-Thread: 115bae,ec6ca9a44d72332 X-Google-Attributes: gid115bae,public X-Google-Thread: 10669a,ec6ca9a44d72332 X-Google-Attributes: gid10669a,public X-Google-ArrivalTime: 2003-04-10 16:13:57 PST Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!nntp.cs.ubc.ca!nntp-relay.ihug.net!ihug.co.nz!abnormal.com!vicpull2.telstra.net!lon-transit.news.telstra.net!news.telstra.net!news-server.bigpond.net.au!not-for-mail From: "Michael Hart" <mixstat-donotspam@bigpond.net.au> Newsgroups: linux.redhat.misc,aus.computers.linux,comp.os.ms-windows.networking.ras,comp.os.ms-windows.nt.admin.networking,comp.os.linux.networking References: <d86la.5914$1h6.50238@news-server.bigpond.net.au> <b73k9i$akska$1@ID-162417.news.dfncis.de> <J4lla.7722$1h6.62828@news-server.bigpond.net.au> Subject: Re: VPN Behind a redhat 7.3 gateway Lines: 26 X-Priority: 3 X-MSMail-Priority: Normal X-Newsreader: Microsoft Outlook Express 6.00.2800.1106 X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 Message-ID: <XUmla.8318$1h6.63694@news-server.bigpond.net.au> Date: Thu, 10 Apr 2003 23:13:59 GMT NNTP-Posting-Host: 144.137.65.12 X-Complaints-To: abuse@bigpond.net.au X-Trace: news-server.bigpond.net.au 1050016439 144.137.65.12 (Fri, 11 Apr 2003 09:13:59 EST) NNTP-Posting-Date: Fri, 11 Apr 2003 09:13:59 EST Organization: BigPond Internet Services (http://www.bigpond.net.au)