Complete.Org: Mailing Lists: Archives: linux-help: March 2001:
[linux-help] IPChains Help
Home

[linux-help] IPChains Help

[Top] [All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index] [Thread Index]
To: <linux-help@xxxxxxxxx>
Subject: [linux-help] IPChains Help
From: "Ian Cazabat" <iancaz@xxxxxxxxxxx>
Date: Tue, 13 Mar 2001 14:26:06 -0600
Reply-to: linux-help@xxxxxxxxx

I've got an interesing problem I hope someone can help me with.  I'm fairly
familiar with Linux, but not very familiar with IPChains, we've never gotten
along.
I've got a Slackware 7.1 linux box running as a firewall/ Apache web server
at my house.  I've got a windows 98 machine running behind the Linux box.
Whenever I enter an invalid URL (i.e. http://www.linnux.org) then my
webserver returns my default web page!  I blame this on IPChains because if
I remove all of the rules, then it works just fine.  Below is a copy of the
script I use to setup my IPChains since I have a Dynamic IP Address.  Any
help would be greatly appreciated.

Thanks,
Ian Cazabat
iancaz@xxxxxxxxxxx

# chainrules script to load IP Chains on boot.
echo "Loading IPChains for IP Address ${IPADDR}."
IPADDR=`cat /etc/dhcpc/dhcpcd-eth0.info | grep IPADDR | cut -c8-22`
ipchains -F
ipchains -X
ipchains -P input ACCEPT
ipchains -P forward DENY
ipchains -P output ACCEPT
ipchains -A input -s 0.0.0.0/0.0.0.0 -d ${IPADDR}/255.255.255.255 80:80 -i
eth0 -p 6 -j ACCEPT
ipchains -A input -s 0.0.0.0/0.0.0.0 -d ${IPADDR}/255.255.255.255 21:21 -i
eth0 -p 6 -j ACCEPT
ipchains -A input -s 0.0.0.0/0.0.0.0 -d ${IPADDR}/255.255.255.255 25:25 -i
eth0 -p 6 -j ACCEPT
ipchains -A forward -s 0.0.0.0/0.0.0.0 -d 0.0.0.0/0.0.0.0 -i eth0 -j MASQ
ipchains -A forward -s 0.0.0.0/0.0.0.0 -d ${IPADDR}/255.255.255.255 -i
eth1 -j ACCEPT
ipchains -A forward -s 0.0.0.0/0.0.0.0 -d 0.0.0.0/0.0.0.0 -j DENY -l
echo "IPChains added for IP Address ${IPADDR}."


-- This is the linux-help@xxxxxxxxx list.  To unsubscribe,
visit http://tmp2.complete.org/cgi-bin/listargate-aclug.cgi


[Prev in Thread] Current Thread [Next in Thread]
  • [linux-help] IPChains Help, Ian Cazabat <=