Re: [gentoo-user] Help with script for iptables

2006-11-16 Thread Mick
On Thursday 16 November 2006 15:19, Nangus Garba wrote: > # I think that a set of rules that looks something like this would be > easier to maintain > # there are 500 little tricks that I could add if I was home and had my > notes Hey! Thanks for your help - please send some more when you get home

Re: [gentoo-user] Help with script for iptables

2006-11-16 Thread Nangus Garba
# I think that a set of rules that looks something like this would be easier to maintain # there are 500 little tricks that I could add if I was home and had my notes iptables -P INPUT DROP iptables -A INPUT -i lo -j ACCEPT #this will take care of all interfaces by default iptables -A INPUT -m s

Re: [gentoo-user] Help with script for iptables

2006-11-16 Thread Mick
On Thursday 16 November 2006 01:15, Flophouse Joe wrote: > On Wed, 15 Nov 2006, Mick wrote: > > On Wednesday 15 November 2006 21:25, Flophouse Joe wrote: > >> On Wed, 15 Nov 2006, Mick wrote: > > > > UPLINK="eth0 wlan0 ppp0" > > for x in ${INTERFACES} > > do > > iptables -A INPUT -i

Re: [gentoo-user] Help with script for iptables

2006-11-15 Thread Flophouse Joe
On Wed, 15 Nov 2006, Mick wrote: On Wednesday 15 November 2006 21:25, Flophouse Joe wrote: On Wed, 15 Nov 2006, Mick wrote: UPLINK="eth0 wlan0 ppp0" for x in ${INTERFACES} do iptables -A INPUT -i ! ${x} -j ACCEPT . . . more rules . . . i

Re: [gentoo-user] Help with script for iptables

2006-11-15 Thread Iain Buchanan
On Wed, 2006-11-15 at 20:29 +, Mick wrote: > Hi All, > > I have been using Daniel Robbins' basic script for years but now on a laptop > I > have more than one ways of connecting to the Internet. The script uses the > variable UPLINK to define the incoming interface like so: > =

Re: [gentoo-user] Help with script for iptables

2006-11-15 Thread Mick
Thanks Joe, On Wednesday 15 November 2006 21:25, Flophouse Joe wrote: > On Wed, 15 Nov 2006, Mick wrote: > >iptables -P INPUT DROP > >iptables -A INPUT -i ! ${UPLINK} -j ACCEPT > > I would like to define more than one iface in UPLINK, e.g. eth0, wlan0, > > ppp0. > > It sounds like

Re: [gentoo-user] Help with script for iptables

2006-11-15 Thread Flophouse Joe
On Wed, 15 Nov 2006, Mick wrote: iptables -P INPUT DROP iptables -A INPUT -i ! ${UPLINK} -j ACCEPT iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT I would like to define more than one iface in UPLINK, e.g. eth0, wlan0, ppp0. It sounds like you want to wri

[gentoo-user] Help with script for iptables

2006-11-15 Thread Mick
Hi All, I have been using Daniel Robbins' basic script for years but now on a laptop I have more than one ways of connecting to the Internet. The script uses the variable UPLINK to define the incoming interface like so: == #change this to the name of