Re: [arch-general] iptables forward policy

2012-08-28 Thread Juan Diego Tascón
Thanks all for your help I finally decided to go with a more simple port forwarding solution using socat a tool to forward tcp conections. This way I can filter forwarded ports by using the router's INPUT chain. Cheers On Sun, Aug 26, 2012 at 1:08 PM, Peter Baldridge wrote: > On Sun, Aug 26, 20

Re: [arch-general] iptables forward policy

2012-08-26 Thread Peter Baldridge
On Sun, Aug 26, 2012 at 10:11 AM, Juan Diego Tascón wrote: > Is there any way to debug iptables, Juan, Another good way to debug IPTables (if you can limit the traffic to the box to just what you are troubleshooting) use the command : sudo iptables -Z && sudo watch -n .5 iptables -nvL ^zeros t

Re: [arch-general] iptables forward policy

2012-08-26 Thread Bastian Beischer
Dear Juan, see the section on logging in the wiki: https://wiki.archlinux.org/index.php/Iptables#Logging Cheers Bastian On Sun, Aug 26, 2012 at 7:11 PM, Juan Diego Tascón wrote: > Thanks for both replies. The graphic does it a lot more > understandable. Is there any way to debug iptables, I me

Re: [arch-general] iptables forward policy

2012-08-26 Thread Juan Diego Tascón
Thanks for both replies. The graphic does it a lot more understandable. Is there any way to debug iptables, I mean, like a tool where I can visualize the path of a packet and where exactly it gets dropped/accepted and also realtime packets headers (src, dst, proto, dport, sport, etc)? On Sat, Aug

Re: [arch-general] iptables forward policy

2012-08-25 Thread Corrado Primier
2012/8/25 Juan Diego Tascón : > Good day, Hello :) > I'm thinking of > setting the default FORWARD policy to ACCEPT as my default INPUT > policy is DROP and unless there is a valid FORWARD rule for a given > port the packets wont go anywhere. I'm I right on this? You're wrong. Either a packet go

Re: [arch-general] iptables forward policy

2012-08-25 Thread Damjan
On 25.08.2012 18:47, Juan Diego Tascón wrote: Good day, I'm currently configuring a router. I'm setting the default policies to DROP in the INPUT OUTPUT AND FORWARD chains. I'm thinking of setting the default FORWARD policy to ACCEPT as my default INPUT policy is DROP and unless there is a valid

[arch-general] iptables forward policy

2012-08-25 Thread Juan Diego Tascón
Good day, I'm currently configuring a router. I'm setting the default policies to DROP in the INPUT OUTPUT AND FORWARD chains. I'm thinking of setting the default FORWARD policy to ACCEPT as my default INPUT policy is DROP and unless there is a valid FORWARD rule for a given port the packets wont