Ipchains Woes

Top Page
Attachments:
Message as email
+ (text/plain)
Delete this message
Reply to this message
Author: David A. Sinck
Date:  
Subject: Ipchains Woes

\_ SMTP quoth Craig White on 2/25/2002 18:19 as having spake thusly:
\_
\_ On Mon, 2002-02-25 at 14:45, David A. Sinck wrote:
\_ >
\_ > [...]
\_ > You may need to to -j ACCEPT in masquerade chain for trusted devices?
\_ >
\_ ----
\_ wow - 2 messages in 1 day David.

oh hush.

\_ as default policy - ACCEPT is a really poor idea for ipchains - for
\_ testing purposes, OK - but it will ultimately have to be changed to
\_ REJECT or DENY to have some security and piece of mind...be it forward,
\_ input or output.

It's also not all that keen for iptables. Having futzed with both
ipchains and iptables, I much prefer iptables.

A potentially informative iptables link for masquerading:

http://www.linuxdoc.org/HOWTO/Masquerading-Simple-HOWTO/summary.html

David