/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */
On 9 Mar 2000, Ronneil Camara wrote:
> # Output rule sample
> 1. ipchains -A output -j ACCEPT -i eth0 -p tcp -s 192.168.10.0/255.255.255.0
> -d 192.168.10.1 telnet
This simple says to accept packets matching the address and ports specified
and destined for interface eth0.
> 1. ipchains -A input -j ACCEPT -p icmp -i eth0 -s 192.168.10.0/255.255.255.0
> -d 0.0.0.0/0
>
> This rule is for ICMP. When it reaches the eth0 interface that is destined
> anywhere, it will be ACCEPTed.
In input rules, the -i parameter specifies the interface the packet arrived
on, not which packet it's destined for. In fact, the kernel does not even
know the destination interface in the input chain. The forward and output
chains match "-i" with the destination interface.
-- Michael Best
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS INCLUDES
UNSUBSCRIBING!
or email to [EMAIL PROTECTED]
PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.
