Re: Enable Firewall, But Allow Specific Inbound Connections

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 






now suppose I independently add a rule like this:

-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 3306 -s 192.168.1.0/24 -j ACCEPT

the rule will be added to the bottom of the RH-Firewall -1-INPUT chain, right after that REJECT. So a datagram for port 3306 will traverse the chain, hit the REJECT, and get blown away without ever being inspected by the new rule appearing after the REJECT.

Am I on the right track here?

Thanks

Bob Cochran


Hi there, don't know if anyone give this tip yes, but make a crontab when messing with iptables which shuts down iptables after lets say 10 minutes (or enough time for you to test the new tables), so in case you get yourself locked out of the machine, you will have access again after the job runs. Yeah, experience :)


Regards, Angelo


[Index of Archives]     [Current Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux