[wplug] iptable problems

Romano, Christopher cjr6 at exchange.cis.pitt.edu
Tue Dec 18 09:25:18 EST 2001


I see.  Thanks.

Chris

-----Original Message-----
From: coldfire
To: 'wplug at wplug.org'
Sent: 12/18/2001 1:24 AM
Subject: RE: [wplug] iptable problems

> I have both of these rules.
> iptables -A INPUT -i ppp0 -p tcp --sport 22 -m state --state
NEW,ESTABLISHED
> -j ACCEPT 
> iptables -A OUTPUT -o ppp0 -p tcp --dport 22 -m state --state
> >NEW,ESTABLISHED -j ACCEPT

yes, but the rule for the incoming interface is specifying the source
port.  ssh doesn't use a source port of 22.  the destination port is
port
22.  the source port is just some arbitrary port above 1024.


coldie

_______________________________________________
wplug mailing list
wplug at wplug.org
http://www.wplug.org/mailman/listinfo/wplug



More information about the wplug mailing list