iptables

[Dimitris Mexis]

On Wed, 19 Jul 2006 12:52:23 +0300, V13 wrote:

> On Wednesday 19 July 2006 12:40, V13 wrote:
>> On Wednesday 19 July 2006 12:27, Dimitris Mexis wrote:
>> > Einai kalitero afto to copy/paste ?
>> >
>> > [root at zeus root]# more /etc/sysconfig/iptables
>> > # Generated by iptables-save v1.2.9 on Tue Jul 18 18:55:22 2006
>>
>> [...]
>>
>> > # Completed on Tue Jul 18 18:55:22 2006
>>
>> Bale kai ena accept sto input se tcp kai udp me *source* port 53.
> 
>   Diorthosi. Bale mono UDP giati to TCP tha soy axristepsei entelos toys TCP 
> kanones soy.
> 
>   Tora, exo kai mia aporia: Exeis kanei accept ta ESTABLISHED? An to exeis 
> kanei tote den prepei na xreiazesai kati apo ta parapano (as me diorthosei 
> kapoios an kano lathos). An den to exeis kanei, kanto...
> 
> <<V13>>
Den katalaveno poli kala ti enoeis? An enoeis opos to katalaveno, oti
"established" epikoinonia exo, den simeni omos oti prepei na apenergopoio
to firewall , na trexo to nfs to cups kai meta na sikono to iptables gia
na vlepei ta "established" ? h' to kano mia fora? kai papala?
Mia akoma erotisi...pos to petixeno to ...established ? :-)