Re: [TCLUG:13767] IPCHAINS again...

[Nate Carlson <natecars@real-time.com>]

On Sun, 20 Feb 2000, Yaron wrote:
> I'm somehow messing up something on the input chain, because when I
> ipchains -P input ACCEPT, everything works. However, having input on
> ACCEPT is pretty much pointess... 
> 

Try leaving input on ACCEPT, and putting a rule at the end something like
this:

ipchains -A input -s 0/0 -d 0/0 -j DENY -l

..which will deny all packets not specified and log the deny to syslog.
Great for troubleshooting.

-- 
Nate Carlson <carlson@real-time.com>    | Phone : (612)943-8700
http://www.real-time.com                | Fax   : (612)943-8500