[wplug] iptable problems

[coldfire]

> I have both of these rules.
> iptables -A INPUT -i ppp0 -p tcp --sport 22 -m state --state NEW,ESTABLISHED
> -j ACCEPT 
> iptables -A OUTPUT -o ppp0 -p tcp --dport 22 -m state --state
> >NEW,ESTABLISHED -j ACCEPT

yes, but the rule for the incoming interface is specifying the source
port.  ssh doesn't use a source port of 22.  the destination port is port
22.  the source port is just some arbitrary port above 1024.


coldie