--BEGIN QUOTE-- ## Insert connection-tracking modules (not needed if built into kernel). # insmod ip_conntrack # insmod ip_conntrack_ftp ## Create chain which blocks new connections, except if coming from inside. # iptables -N block # iptables -A block -m state --state ESTABLISHED,RELATED -j ACCEPT # iptables -A block -m state --state NEW -i ! ppp0 -j ACCEPT # iptables -A block -j DROP ## Jump to that chain from INPUT and FORWARD chains. # iptables -A INPUT -j block --END QUOTE--

On Wed, 29 Sep 2004, TongKe Xue wrote: > Hi all, > > I'm using the iptables config from: > http://www.netfilter.org/documentation/HOWTO//packet-filtering-HOWTO-5.html > > Now, when I try that, apparently KDE and GNOME both refuses to start > -- do they run some kind of server and then connect to it? How can I > fix this? > > (Worked fine on RH9; but apparently refuses to work on FC2). > > To make it easier to respond; the section I'm referring to is: > > --BEGIN QUOTE-- > ## Insert connection-tracking modules (not needed if built into kernel). > # insmod ip_conntrack > # insmod ip_conntrack_ftp > > ## Create chain which blocks new connections, except if coming from inside. > # iptables -N block > # iptables -A block -m state --state ESTABLISHED,RELATED -j ACCEPT > # iptables -A block -m state --state NEW -i ! ppp0 -j ACCEPT > # iptables -A block -j DROP > > ## Jump to that chain from INPUT and FORWARD chains. > # iptables -A INPUT -j block > --END QUOTE-- Just a quick note...I'm hoping that you realize that if you have that exact snippet in your firewall script, there's nothing going on, at all...all of the lines starting with # are effectively commented out. -- Mike Burger http://www.bubbanfriends.org Visit the Dog Pound II BBS telnet://dogpound2.citadel.org or http://dogpound2.citadel.org To be notified of updates to the web site, visit http://www.bubbanfriends.org/mailman/listinfo/site-update, or send a message to: site-update-request(a)bubbanfriends.org with a message of: subscribe

Hi all, I'm using the iptables config from: http://www.netfilter.org/documentation/HOWTO//packet-filtering-HOWTO-5.html Now, when I try that, apparently KDE and GNOME both refuses to start -- do they run some kind of server and then connect to it? How can I fix this? (Worked fine on RH9; but apparently refuses to work on FC2). To make it easier to respond; the section I'm referring to is: --BEGIN QUOTE-- ## Insert connection-tracking modules (not needed if built into kernel). # insmod ip_conntrack # insmod ip_conntrack_ftp ## Create chain which blocks new connections, except if coming from inside. # iptables -N block # iptables -A block -m state --state ESTABLISHED,RELATED -j ACCEPT # iptables -A block -m state --state NEW -i ! ppp0 -j ACCEPT # iptables -A block -j DROP ## Jump to that chain from INPUT and FORWARD chains. # iptables -A INPUT -j block --END QUOTE-- On Wed, 29 Sep 2004 23:24:41 -0700, TongKe Xue <tongke(a)gmail.com&gt; wrote: > Hi all, > > I'm using the iptables config from: > http://www.netfilter.org/documentation/HOWTO//packet-filtering-HOWTO-5.html