On Fri, 09 Nov 2007 08:17:44 +0900 John Summerfield <debian@xxxxxxxxxxxxxxxxxxxxxx> wrote: > He posted his rules to the list. His policy is accept, but he had a > global reject that would cause the message he saw. Where in the global reject was? > Does this help? > # service iptables stop No. How it can help, if no route is specified? But I have changed to this: iptables -A FORWARD -s 192.168.0.0/24 -j ACCEPT iptables -A FORWARD -d 192.168.0.0/24 -j ACCEPT iptables -t nat -A POSTROUTING -o ppp0 -s 192.168.0.0/24 -j MASQUERADE and now it works. Weird that adding the last line (without 'iptables ' at the line beginning, of course) to the iptables file did error message at iptables restart. But loaded from command line is fine. How I can save the rules to survive reboot? Is there a tool provided for the iptables configuration, not system-config-security?
