[Sheflug] Re: Iptables

[Richard Ibbotson <xxxxx [at] xxxxxxxxxxxxx>]

Baz

Thanks ever so much...

> Note that using service names (pop3, smtp etc) in the --sport and
> --dport fields is a valid substitution for port numbers.

One last thing.  I promise I'll go away to the Hillsborough Hotel and 
have a beer after this...  ftp ...  is this one right or wrong ?  
Always get ftp wrong....

#
# ftp
#
iptables -A FORWARD -i eth0 -o ppp0  -p tcp \
	-s 192.168.1.0/24  --dport 21 \
	-m state  --state NEW, RELATED, ESTABLISHED  \
	 -j ACCEPT


Thank you



-- 
Richard
___________________________________________________________________

Sheffield Linux User's Group -
http://www.sheflug.co.uk/mailfaq.html

  GNU the choice of a complete generation.