Hi,

I have never faced such issue before regarding IPTABLES in CentOS.

I am just trying to create a vanilla httpd site which will show "It Works"
or the default page of httpd.

Now, I have inserted port 80 in iptables, but yet when I *start iptables, my
page is not coming. When I stop running iptables, page is coming. *

For your understanding, I am attaching my steps here:

1. opened /etc/sysconfig/iptables

2. entered this line:
    *-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j
ACCEPT
*
3. restarted iptables with:  *service iptables restart

*And, here is my "iptables -L" output:

*Chain INPUT (policy ACCEPT)
target     prot opt source               destination
RH-Firewall-1-INPUT  all  --  anywhere             anywhere

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
RH-Firewall-1-INPUT  all  --  anywhere             anywhere

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

Chain RH-Firewall-1-INPUT (2 references)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere
ACCEPT     icmp --  anywhere             anywhere            icmp any
ACCEPT     esp  --  anywhere             anywhere
ACCEPT     ah   --  anywhere             anywhere
ACCEPT     udp  --  anywhere             2xx.x.x.xxx         udp dpt:mdns
ACCEPT     udp  --  anywhere             anywhere            udp dpt:ipp
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:ipp
ACCEPT     all  --  anywhere             anywhere            state
RELATED,ESTABLISHED
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp
dpt:ssh
REJECT     all  --  anywhere             anywhere            reject-with
icmp-host-prohibited
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp
dpt:http

*Can anyone please guide me something?

-- 
Best,
Zico
_______________________________________________
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc

Reply via email to