Re: cleaning up my firewall script...

[Pieter Smit <debian-firewall@vigor.co.za>]

Hi Bjoern,

I remember reading that in iptables the INPUT chain is not used when  
packets are forwarded, only the FORWARD chain, try adding

	iptables -A FORWARD -j SHRED

Regards,
Pieter Smit
On 2004.02.09 02:12, Bjoern Schmidt wrote:
> Richard Verwayen wrote:
>
> finish_rules()
> {
>         iptables -N SHRED
>         iptables -A INPUT   -j SHRED
>         iptables -A SHRED   -j ULOG
>         iptables -A SHRED   -j DROP
> }
>
> This rule should match on all packets so that the chain
> policy will never be used, but it does not work correctly.
> Where is the mistake?
>
>
> --
> Greetings
> Bjoern Schmidt
>
>
>
> --
> To UNSUBSCRIBE, email to debian-firewall-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists. 
> debian.org