[Sheflug] Re: Iptables

[Richard Ibbotson <xxxxx [at] xxxxxxxxxxxxx>]

Baz

Thanks for that.  Helped a lot...

> iptables -A FORWARD -i eth0 -o ppp0 -p tcp \
> 	 -s 192.168.1.1/24 --dport 80 -m state --state \
> 	 NEW,RELATED,ESTABLISHED -j ACCEPT


Just one other that I'm confused about and that's allowing mail in 
and out.  This is what I've got just now.  I've changed it slightly 
after reading the other one about web pages.....

# mail
iptables -A FORWARD -i eth0 -o ppp0  -p tcp \
	-s 192.168.1.0/24 mail.mailserver.co.uk  --dport 25 \
	-m state  --state NEW, RELATED, ESTABLISHED  \
	 -j ACCEPT
#
#mail
#
iptables -A FORWARD -i eth0 -o ppp0  -p tcp \
	-s 192.168.1.0/24  --dport \
	mail.mailserver.co.uk  --dport 110 \
	-m state  --state NEW, RELATED, ESTABLISHED \
	 -j ACCEPT


Thanks



-- 
Richard
___________________________________________________________________

Sheffield Linux User's Group -
http://www.sheflug.co.uk/mailfaq.html

  GNU the choice of a complete generation.