Re: iptables and services

[Alex Ilyushin <alex@xxxxx>]

paras wrote:
> hi all
>
> I have default policy to DROP on one machine. but i want the web server 
> (80) to be accessed from the internet but it is not working with the 
> following script. help plz.
> iptables -P INPUT DROP
> iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
> iptables -A INPUT -p tcp --dport 80 -m state --state NEW -j ACCEPT
Wrong order of rules. You must add -P INPUT DROP after all rules, or use 
-I (insert).

---
Alex.


------------------------------------------------------------------------
    To unsubscribe email security-discuss-request@linuxsecurity.com
        with "unsubscribe" in the subject of the message.