> I found out that when I run iptables rule below:
[snip]
> ip address of the nic connected to the modem is not pinged.
> But I don't set any restriction for icmp???

Depends upon what your default policy is defined as.  If the default policy
is DENY then you must specifically include an ACCEPT rule for icmp traffic.

Askar you can find many iptables help sites via a google search and I have
at least one good book on iptables (sorry, forget the title, email me if you
want it and I'll post it back to you).

That said, I can't say enough about shorewall.  I struggled with iptables
trying to get everything just right, but when I switched to shorewall (which
uses iptables behind the scenes) managing my iptables rules became so much
simpler.



-- 
gentoo-user@gentoo.org mailing list

Reply via email to