by Greetings. I putting the finishing touches on my firewall, but notice that when I
use 'whois' on one of my Linux boxes behind my firewall (which is using 2.2.5
kernel, ipchains 1.3.8 and diald 0.16 and masquerading) that the reply does not
make it through. Below are the lines in my 'rc.firewall' script. Everything
else like HTTP, FTP, SSH, etc. make it just fine. Also, if there is anything
that I am blatantly missing please let me know. Thanks in advance.
-Steve
*********************
/sbin/depmod -a
/sbin/modprobe ip_masq_ftp
/sbin/modprobe ip_masq_raudio
echo "1" > /proc/sys/net/ipv4/ip_forward
ipchains -F
ipchains -P input DENY
ipchains -P forward DENY
ipchains -P output ACCEPT
ipchains -A input -i ppp0 -s 192.168.10.0/24 -l -j DENY
ipchains -A input -i ppp0 -s 127.0.0.1/32 -l -j DENY
ipchains -A input -i ppp0 -s 0/0 -d 192.168.10.255/32 -l -j DENY
ipchains -A input -i ppp0 -s 0/0 -d xxx.xxx.xxx.255/32 -l -j DENY
ipchains -A input -i ppp0 -s 0/0 -d xxx.xxx.xxx.xxx/32 -j ACCEPT
ipchains -A input -s 192.168.10.0/24 -d 0/0 -j ACCEPT
ipchains -M -S 7200 300 300
ipchains -A forward -s 192.168.10.0/24 -j MASQ