Hi all, I use following rules (not only :-) in my fw script:
$IPTABLES -A INPUT -i $INTERNAL -m state --state INVALID -j DROP $IPTABLES -A INPUT -i $INTERNAL -m state --state RELATED,ESTABLISHED -j ACCEPT but when I try to connect to w98 using smbmount or smbclient it still drops returning packets. I think that they should be ESTABLISHED packets and should be accepted. Can you help me to find, where is a problem? Relevant syslog message: May 9 13:22:02 fw kernel: Rule21:IN=eth0 OUT= MAC=00:02:1b:f1:50:26:00:50:fc:50:24:6c:08:00 SRC=192.168.1.72 DST=192.168.1.2 LEN=90 TOS=0x00 PREC=0x00 TTL=128 ID=39856 PROTO=UDP SPT=137 DPT=32784 LEN=70 where 192.168.1.2 is linuxbox from where I am trying to connect w98 computer with ip 192.168.1.72 and Rule21 is the last rule in the INPUT table: $IPTABLES -A INPUT -j LOG --log-prefix="Rule21:" Default policy of INPUT table is DROP I am using Debian woody with 2.4.18 kernel and iptables v1.2.5 ucar
