[CentOS] iptables: forwarding on internal device

Mon Feb 9 12:16:41 UTC 2009
Agile Aspect <agile.aspect at gmail.com>

Marcus Moeller wrote:
> Good Morning,
>
> iptables -L -v now shows:
>
>     0     0 ACCEPT     all  --  eth0   eth0    anywhere
> anywhere            state NEW,RELATED,ESTABLISHED
>
> But the packages are still dropped:
>
> Feb  9 10:48:20 firewall kernel: DROP-TCP IN=eth0 OUT=eth0
> SRC=192.168.100.192 DST=172.28.2.161 LEN=44 TOS=0x00 PREC=0x00 TTL=59
> ID=54 PROTO=TCP SPT=9100 DPT=4068 WINDOW=0 RES=0x00 ACK SYN URGP=0
>
>   
My guess is will ACCEPT packets but since you haven't defined
a FORWARD or an OUPUT chain it drops them.

-- 
Article. VI. Clause 3 of the constitution of the United States states: 

"The Senators and Representatives before mentioned, and the Members of 
the several State Legislatures, and all executive and judicial Officers, 
both of the United States and of the several States, shall be bound by 
Oath or Affirmation, to support this Constitution; but no religious Test 
shall ever be required as a Qualification to any Office or public Trust 
under the United States."