There's a great little package I used before I learned all I ever wanted
to know about IPTables.
It's called NARC (Netfilter Automatic Rule Configurator).
It's easy to use, it has one main config file where you input all your
settings.
http://www.knowplace.org/netfilter/narc.html

Think of it as "IPTables for the people without time on their hands."

--agenthh

Tyler "Overkill" Schwend wrote:
Ha, ignore all that. I figured it out. (Sigh)
>
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On
Behalf Of Tyler
"Overkill" Schwend
Sent: Thursday, February 20, 2003 5:14 PM
To: [EMAIL PROTECTED]
Subject: RE: [hlds_linux] Re: OT: IPTables logging


Interesting... I shall try that...

Have a look here, since I'm having a seperate problem now that
I've tried to organize stuff again...

--

Chain INPUT (policy DROP)
target     prot opt source               destination
INPUT_ACCEPT  all  --  anywhere             anywhere

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

Chain INPUT_ACCEPT (1 references)
target     prot opt source               destination
ACCEPT     udp  --  anywhere             anywhere           udp
ACCEPT     icmp --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere
    state
ESTABLISHED
ACCEPT     tcp  --  anywhere             anywhere           tcp
spt:4662
ACCEPT     tcp  --  anywhere             anywhere           tcp
spt:3784
ACCEPT     udp  --  anywhere             anywhere           udp
spt:3784
ACCEPT     udp  --  anywhere             anywhere           udp
spt:4662
INPUT_HOSTS  all  --  anywhere             anywhere
RETURN     all  --  anywhere             anywhere

Chain INPUT_HOSTS (1 references)
target     prot opt source               destination
ACCEPT     all  --  [various hosts]  anywhere
RETURN     all  --  anywhere             anywhere

--

Now all of the sudden Ventrilo, on port 3784, isn't working for
people who aren't in the INPUT_HOSTS chain.... ?

As for the log, you say put it as the last in the INPUT chain?
_______________________________________________
To unsubscribe, edit your list preferences, or view the list archives, please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux

Reply via email to