Hello guys, <br><br>Service iptables stop killed the iptables service but did not solve your problem. <br><br>Assuming you have a linux router with two NIC cards - one connected to the LAN and the other one to the internet;<br>
<br>We need to understand how the IPtables work in order to efficiently use them to route/manage our traffic. We always want to start with defining the policies in IPTables. The
policies are the default rules that are applied in case your traffic
does NOT match any filters you have set.<br>So if you want to allow only
certain things in or out of your network and there is a default Deny all at the end - just like junos/juniper/cisco etc - any traffic that is not allowed by any of your filters
will be denied. This is called rules matching. The 3 policies that need
to be set are: <strong>INPUT, FORWARD</strong> and <strong>OUTPUT</strong>.<br><br>This is the most important part! - The policies define the default action for the <strong>DEFAULT CHAINS, <br></strong><ul><li><strong>INPUT        </strong>- traffic <strong>COMING TO</strong> the machine directly</li>
<li><strong>OUTPUT</strong>    - traffic <strong>GOING FROM</strong> the machine directly</li><li><strong>FORWARD</strong> - traffic <strong>COMING FROM</strong> or <strong>GOING TO</strong> a networked machine on the other side of the firewall</li>
</ul><br>The 2 actions you can set in these policies are <strong>ACCEPT and DROP</strong>.<br><br>With that in mind, you will never be afraid of IPtables.<br><br>all the best<br>Francis<br><br><br><br><br><br><br><div class="gmail_quote">
On Thu, Feb 4, 2010 at 4:16 PM, Steve Muchai <span dir="ltr">&lt;<a href="mailto:smuchai@gmail.com">smuchai@gmail.com</a>&gt;</span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div class="im">On Thu, Feb 4, 2010 at 3:58 PM, Nd&#39;wex Common &lt;<a href="mailto:flexycat@gmail.com">flexycat@gmail.com</a>&gt; wrote:ys<br>
&gt; i&#39;ve typed in the following command:<br>
&gt; service iptables stop<br>
&gt;<br>
&gt; After which access from the remote machine it worked quite well<br>
&gt;<br>
&gt; netstat indicates that the port 3306 is bound to both loopback as well as<br>
&gt; the machines actual ip address<br>
<br>
</div>Good, then;<br>
iptables -A INPUT -s &lt;remote_ip&gt; -p tcp --dport 3306 -j ACCEPT<br>
<br>
should do.<br>
<div class="im"><br>
BR,<br>
S<br>
<br>
--<br>
Sent from my socksŪ<br>
_______________________________________________<br>
</div><div><div></div><div class="h5">Skunkworks mailing list<br>
<a href="mailto:Skunkworks@lists.my.co.ke">Skunkworks@lists.my.co.ke</a><br>
<a href="http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks" target="_blank">http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks</a><br>
------------<br>
Skunkworks Server donations spreadsheet<br>
<a href="http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1fbjAwOUE&amp;hl=en" target="_blank">http://spreadsheets.google.com/ccc?key=0AopdHkqSqKL-dHlQVTMxU1VBdU1BSWJxdy1fbjAwOUE&amp;hl=en</a><br>

------------<br>
Skunkworks Rules<br>
<a href="http://my.co.ke/phpbb/viewtopic.php?f=24&amp;t=94" target="_blank">http://my.co.ke/phpbb/viewtopic.php?f=24&amp;t=94</a><br>
------------<br>
Other services @ <a href="http://my.co.ke" target="_blank">http://my.co.ke</a><br>
Other lists<br>
-------------<br>
Announce: <a href="http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks-announce" target="_blank">http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks-announce</a><br>
Science:  <a href="http://lists.my.co.ke/cgi-bin/mailman/listinfo/science" target="_blank">http://lists.my.co.ke/cgi-bin/mailman/listinfo/science</a><br>
kazi:     <a href="http://lists.my.co.ke/cgi-bin/mailman/admin/kazi/general" target="_blank">http://lists.my.co.ke/cgi-bin/mailman/admin/kazi/general</a></div></div></blockquote></div><br>