You're right, David...thanks for pointing that out.

On Fri, 22 Mar 2002, David Talkington wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Mike Burger wrote:
> 
> >> Why am I getting this error?  In my /etc/sysconfig/ipchains script, I
> >> have:
> >> -A input -p tcp -s 0/0 -d 0/0 2401 -y -j ACCEPT 
> >> 
> >> Where am I going wrong?
> >
> >Try -A INPUT -i eth0 -p tcp --dport 2401 -j ACCEPT
> >
> >The --dport is important.
> 
> No, he had that part right, Mike; note that this is ipchains, not
> iptables ... the part I think we should examine is the -y.  This rule
> _only_ matches packets with the SYN bit set.
> 
> Kevin, if this rule is on the server, the -y should be dropped.  If it's 
> on the client, you probably meant ' ! -y ', don't you think?
> 
> - -d
> 
> - -- 
> David Talkington
> 
> PGP key: http://www.prairienet.org/~dtalk/0xCA4C11AD.pgp
> 
> 
> -----BEGIN PGP SIGNATURE-----
> Version: PGP 6.5.8
> Comment: Made with pgp4pine 1.75-6
> 
> iQA/AwUBPJvlTL9BpdPKTBGtEQLG7wCfell9lobnRvAC4PHtq+A+m6RrUagAn0L3
> jOOn8KhTv40jKPOfOxEy1F7h
> =tQ1/
> -----END PGP SIGNATURE-----
> 
> 
> 
> 
> _______________________________________________
> Redhat-list mailing list
> [EMAIL PROTECTED]
> https://listman.redhat.com/mailman/listinfo/redhat-list
> 



_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to