-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Mike Burger wrote:

>> Why am I getting this error?  In my /etc/sysconfig/ipchains script, I
>> have:
>> -A input -p tcp -s 0/0 -d 0/0 2401 -y -j ACCEPT 
>> 
>> Where am I going wrong?
>
>Try -A INPUT -i eth0 -p tcp --dport 2401 -j ACCEPT
>
>The --dport is important.

No, he had that part right, Mike; note that this is ipchains, not
iptables ... the part I think we should examine is the -y.  This rule
_only_ matches packets with the SYN bit set.

Kevin, if this rule is on the server, the -y should be dropped.  If it's 
on the client, you probably meant ' ! -y ', don't you think?

- -d

- -- 
David Talkington

PGP key: http://www.prairienet.org/~dtalk/0xCA4C11AD.pgp


-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.8
Comment: Made with pgp4pine 1.75-6

iQA/AwUBPJvlTL9BpdPKTBGtEQLG7wCfell9lobnRvAC4PHtq+A+m6RrUagAn0L3
jOOn8KhTv40jKPOfOxEy1F7h
=tQ1/
-----END PGP SIGNATURE-----




_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to