iptables --flush confusion

E K ekg_ab-FFYn/CNdgSA at public.gmane.org
Tue Nov 24 20:14:34 UTC 2009


--- On Sat, 5/30/09, simon-tlug-GaisZHhRk3c at public.gmane.org <simon-tlug-GaisZHhRk3c at public.gmane.org> wrote:

> From: simon-tlug-GaisZHhRk3c at public.gmane.org <simon-tlug-GaisZHhRk3c at public.gmane.org>
> Subject: [TLUG]: iptables --flush confusion
> To: tlug-lxSQFCZeNF4 at public.gmane.org
> Received: Saturday, May 30, 2009, 5:22 PM
> I have a router set up to do NAT
> that's using iptables, with net.ipv4.ip_forward=1, and I'm
> somewhat confused why when I do an 'iptables --flush', I'm
> no longer able to connect to it from another device that is
> on the same subnet that the 'wan' interface is on.
> 
> Does anyone know why this is? Am I misunderstanding what it
> is that --flush does, or some other basic networking
> concept?
> 
> Cheers,
> spd
> --

You are clearing the filter table entries from the router. That basically breaks the NAT operation.


> The Toronto Linux Users Group.     
> Meetings: http://gtalug.org/
> TLUG requests: Linux topics, No HTML, wrap text below 80
> columns
> How to UNSUBSCRIBE: http://gtalug.org/wiki/Mailing_lists
>



      __________________________________________________________________
Make your browsing faster, safer, and easier with the new Internet Explorer® 8. Optimized for Yahoo! Get it Now for Free! at http://downloads.yahoo.com/ca/internetexplorer/
--
The Toronto Linux Users Group.      Meetings: http://gtalug.org/
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://gtalug.org/wiki/Mailing_lists





More information about the Legacy mailing list