
Hello guys, Service iptables stop killed the iptables service but did not solve your problem. Assuming you have a linux router with two NIC cards - one connected to the LAN and the other one to the internet; We need to understand how the IPtables work in order to efficiently use them to route/manage our traffic. We always want to start with defining the policies in IPTables. The policies are the default rules that are applied in case your traffic does NOT match any filters you have set. So if you want to allow only certain things in or out of your network and there is a default Deny all at the end - just like junos/juniper/cisco etc - any traffic that is not allowed by any of your filters will be denied. This is called rules matching. The 3 policies that need to be set are: *INPUT, FORWARD* and *OUTPUT*. This is the most important part! - The policies define the default action for the *DEFAULT CHAINS, * - *INPUT *- traffic *COMING TO* the machine directly - *OUTPUT* - traffic *GOING FROM* the machine directly - *FORWARD* - traffic *COMING FROM* or *GOING TO* a networked machine on the other side of the firewall The 2 actions you can set in these policies are *ACCEPT and DROP*. With that in mind, you will never be afraid of IPtables. all the best Francis On Thu, Feb 4, 2010 at 4:16 PM, Steve Muchai <smuchai@gmail.com> wrote:
On Thu, Feb 4, 2010 at 3:58 PM, Nd'wex Common <flexycat@gmail.com> wrote:ys
i've typed in the following command: service iptables stop
After which access from the remote machine it worked quite well
netstat indicates that the port 3306 is bound to both loopback as well as the machines actual ip address
Good, then; iptables -A INPUT -s <remote_ip> -p tcp --dport 3306 -j ACCEPT
should do.
BR, S
-- Sent from my socks® _______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Server donations spreadsheet
http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1f... ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke Other lists ------------- Announce: http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks-announce Science: http://lists.my.co.ke/cgi-bin/mailman/listinfo/science kazi: http://lists.my.co.ke/cgi-bin/mailman/admin/kazi/general