Am 03/09/2017 um 11:58 PM schrieb Unman: > On Thu, Mar 09, 2017 at 11:48:23PM +0100, evo wrote: >> >> >> Am 03/09/2017 um 11:45 PM schrieb Unman: >>>> >>>> with -vv it shows me the whole script in terminal.. without problems. >>>> >>>> hmm... wait... do i need "iptables -I" just one time at the beginning? >>>> i think this is the mistake. i have it before every line. >>> >>> Each line is evaluated separately, so you need the full command on each >>> line. >>> >>> There's nothing wrong with the line you quoted. >>> Post another line - one that you think isn't implemented, or better >>> still the whole of the file. >>> >>> unman >>> >> >> i looked after this rule and the thing was, it was listed also in the >> standard firewall-settings on the GUI. So no rule works in the script. >> > > So post the lines that arent working >
iptables -I FORWARD -s 10.137.x.x -d x.0.0.0/8 -p tcp --dport 443 -j ACCEPT iptables -I FORWARD -s 10.137.x.x -d x.0.0.0/8 -p tcp --dport 80 -j ACCEPT and so on. the source IP is always the same, because it goes from the same VM, the dest.IP is in the upper case the same too, because it should give the 443 and 80 on the same website. can this be a problem, the same dest.IPs and different ports with two entries? must i write it in one entry with two ports? if yes then, how? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/512cac9c-e1d2-e3e9-85ef-3ecd998df49e%40aliaks.de. For more options, visit https://groups.google.com/d/optout.
