Hi all,
I had a rule like this:
iptables -P OUTPUT DROP
iptables -A OUTPUT -p ALL -o lo -s 127.0.0.1 -j ACCEPT
This way, my firewall was dropping a lot of legitimate packets originated from lo which use the source ip's of the internal or external interfaces(instead of 127.0.0.1).
I extracted  that rule (iptables -A OUTPUT -p ALL -o lo -s 127.0.0.1 -j ACCEPT) from the iptables-howto. Can I conclude that this rule is wrong?
Now I subtituted it for: iptables -A OUTPUT -p ALL -o lo -j ACCEPT
Does it offer any risk?
 
Thank you,
-------------------------------------------------
 -- Bruno Negr�o -- Suporte
 -- Plugway Acesso Internet Ltda.
 -- (31)34812311
 -- [EMAIL PROTECTED]

Reply via email to