IPChains rules.

From: Bruno Gimenes Pereti (pereti@ump.edu.br)
Date: 01/16/02


From: "Bruno Gimenes Pereti" <pereti@ump.edu.br>
To: <security-discuss@linuxsecurity.com>
Date: Wed, 16 Jan 2002 17:59:35 -0200

Hello,

I have 3 NIC in my NAT (IPChains) and want to know what does it do if I
write the rules without the -i option. Does it aply the rules for all NICs
or just for eth0. For examples, if I write:

input -s 0/0 -d 0/0 22 -p tcp -j REJECT
output -s LocalIP/32 -d 0/0 22 -p tcp -j ACCEPT

Does it REJECT ssh packets from my intranet 192.168.1.0/24 (eth1) to outside
(eth0)?

Another thing, if I have squid running in this machine does I need to ACCEPT
packets from intranet to port 3128?

Thank's

Bruno Pereti.

------------------------------------------------------------------------
     To unsubscribe email security-discuss-request@linuxsecurity.com
         with "unsubscribe" in the subject of the message.