Robert Spangler wrote:
On Tuesday 27 January 2009 21:45, Agile Aspect wrote:
Robert Spangler wrote:
Do you have a rule like this:
-A OUTPUT --m state --state RELATED,ESTABLISHED -j ACCEPT
No I don't.
It doesn't work under CentOS 5.2. But it works on my laptop which is running Fedora 9.
I don't understand why it doesn't work on your server unless you are not using STATEFUL inspection on your firewall.
Use /usr/sbin/system-config-network-tui to generate a template iptables file and then add the syntax in question.
It won't load. You'll have to re-write it.
In short, it's syntax sugar.
It doesn't work in CentOS 5.2 but it works on laptop which running Fedora 9.
It's hard to imagine iptables not being stateful if you're using the key words NEW, ESTABLISHED, and RELATED.