[Primipassi] IPTABLES:...non mi lascia passare

[Aldo Podavini]

Stranissimo...
Sei sicuro che sia una porta tcp e non udp, vero ?
Infila due righe per il log, prima dei drop:

>-A FORWARD -i eth0 -o eth1 -j inetlan
>-A FORWARD -i eth1 -o eth0 -j laninet
>-A inetlan -s 10.0.3.0/255.255.255.0 -j DROP
>-A inetlan -p tcp -m tcp --dport 20 -j ACCEPT
>-A inetlan -p tcp -m tcp --dport 21 -j ACCEPT
>-A inetlan -p tcp -m tcp --dport 22 -j ACCEPT
>-A inetlan -p tcp -m tcp --dport 80 -j ACCEPT
>-A inetlan -p tcp -m tcp --dport 4000 -j ACCEPT
>-A inetlan -m state --state RELATED,ESTABLISHED -j ACCEPT
>
iptables -A inetlan -j LOG --lo-prefix "droppato (inetlan)"

>-A inetlan -p tcp -j REJECT --reject-with tcp-reset
>-A laninet -s ! 10.0.3.0/255.255.255.0 -j DROP
>-A laninet -p tcp -m tcp --dport 3000:3100 -j ACCEPT
>-A laninet -p tcp -m tcp --dport 21 -j ACCEPT
>-A laninet -p tcp -m tcp --dport 20 -j ACCEPT
>-A laninet -p tcp -m tcp --dport 22 -j ACCEPT
>-A laninet -p tcp -m tcp --dport 23456 -j ACCEPT
>-A laninet -p tcp -m tcp --dport 5900 -j ACCEPT
>-A laninet -m state --state RELATED,ESTABLISHED -j ACCEPT
>
iptables -A laninet -j LOG --lo-prefix "droppato (laninet)"

>-A laninet -p tcp -j REJECT --reject-with tcp-reset
>COMMIT
>  
>