Ping and traceroute denied?
Hi,
I added this rules (with fwbuilder):
$IPTABLES -A FORWARD -p icmp -m state --state NEW -j ACCEPT $IPTABLES -A OUTPUT -p icmp -m state --state NEW -j ACCEPT $IPTABLES -A INPUT -p icmp -m state --state NEW -j ACCEPT
Why was ping from an interface of my firewall-host denied? Traceroute too.
What rule shall I add?
Thanks!
Nicole
Quoted 4 lines · Nicole Haehnel
Hi,
I added this rules (with fwbuilder):
Quoted 8 lines
$IPTABLES -A FORWARD -p icmp -m state --state NEW -j ACCEPT $IPTABLES -A OUTPUT -p icmp -m state --state NEW -j ACCEPT $IPTABLES -A INPUT -p icmp -m state --state NEW -j ACCEPT
Why was ping from an interface of my firewall-host denied? Traceroute too.
When the return packets come back, their state is not NEW, probably RELATED.
Quoted 2 lines
What rule shall I add?
$IPTABLES -A INPUT -p icmp -m state --state NEW,RELATED -j ACCEPT
Quoted 3 lines
Thanks!
Nicole
Signature · 7 lines
-- Raymond Leach <[email protected]> Network Support Specialist http://www.knowledgefactory.co.za "lynx -source http://www.rchq.co.za/raymondl.asc | gpg --import" Key fingerprint = 7209 A695 9EE0 E971 A9AD 00EE 8757 EE47 F06F FB28 --
Hi,
it works!
Now I have to teach this fwbuilder.
Thanks!
Nicole
Quoted 35 lines · Ray Leach
Quoted 4 lines · Nicole Haehnel
Hi,
I added this rules (with fwbuilder):
Quoted 10 lines
$IPTABLES -A FORWARD -p icmp -m state --state NEW -j ACCEPT $IPTABLES -A OUTPUT -p icmp -m state --state NEW -j ACCEPT $IPTABLES -A INPUT -p icmp -m state --state NEW -j ACCEPT
Why was ping from an interface of my firewall-host denied? Traceroute too.
When the return packets come back, their state is not NEW, probably RELATED.
Quoted 4 lines
What rule shall I add?
$IPTABLES -A INPUT -p icmp -m state --state NEW,RELATED -j ACCEPT
Quoted 5 lines
Thanks!
Nicole
if you have policies for INPUT, OUTPUT and FORWARD to ACCEPT, those rules are not needed.
Also, if the traffic is generated in the same firewall FORWARD chain will not match. Its no needed
Before you add those rules, the pings and traces was working?
Hello Nicole,
Wednesday, February 18, 2004, 6:15:11 AM, you wrote:
NH> Hi,
NH> I added this rules (with fwbuilder):
NH> $IPTABLES -A FORWARD -p icmp -m state --state NEW -j ACCEPT NH> $IPTABLES -A OUTPUT -p icmp -m state --state NEW -j ACCEPT NH> $IPTABLES -A INPUT -p icmp -m state --state NEW -j ACCEPT
NH> Why was ping from an interface of my firewall-host denied? NH> Traceroute too.
NH> What rule shall I add?
NH> Thanks!
NH> Nicole
Signature · 2 lines
Best regards, Alexis mailto:[email protected]