RE: Iptables help ..

[David Bokan]

Title: RE: Iptables help ..

From: David Bokan
Sent: Tuesday, August 31, 2004 1:56 PM
To: '[EMAIL PROTECTED]'
Subject: RE: Iptables help ..
 
I think that you'd have to use the FORWARD chain instead of INPUT
/sbin/iptables -A FORWARD -p tcp -I eth0 -s 0/0 -d ! 10.0.0.0/8 --dport 25  -j REJECT
 
> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, August 31, 2004 1:22 PM
> To: [EMAIL PROTECTED]
> Subject: Iptables help ..
>
> Hi,
>
> I am using the following iptables rules for the NAT, but i also want to
> block outgoing port 25 traffic from the LAN clients. INAT works fine but
> the outgoing port 25 is still open
>
> /sbin/iptables -F -t nat
> /sbin/iptables -A INPUT -p tcp -i eth0 -s 0/0 -d ! 10.0.0.0/8
> --dport 25
> -j REJECT
> /sbin/iptables -t nat -A POSTROUTING -o eth1 -j MASQUERADE
>
> But the outgoing port 25 is still open, can some tell me whats wrong in
> these rules.
>
> Regards
> Azher
>
>
>
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact
> [EMAIL PROTECTED]