SVmco User Guide
21
prohibited
Chain OUTPUT (policy ACCEPT)
target prot opt source
destination
Chain MMLAN (2 references)
target prot opt source
destination
ACCEPT udp -- 192.168.0.0/24 192.168.0.1
udp
dpts:7000:7100
ACCEPT udp -- 192.168.0.1
192.168.0.0/24 udp
spts:7000:7100
ACCEPT udp -- 192.168.0.0/24 192.168.0.1
udp dpt:162
ACCEPT udp -- 192.168.0.1
192.168.0.0/24 udp spt:162
ACCEPT udp -- 192.168.1.5
192.168.0.1
udp dpts:7000:7100
ACCEPT udp -- 192.168.0.1
192.168.1.5
udp spts:7000:7100
ACCEPT udp -- 192.168.1.5
192.168.0.1
udp dpt:162
ACCEPT udp -- 192.168.0.1
192.168.1.5
udp spt:162
4.
Add "MMLAN" to the fifth INPUT chain (before the REJECT setting) and
to the OUTPUT chain. (For details on the iptables option, see the man
manual.)
# /sbin/iptables –I INPUT 5 –j MMLAN
# /sbin/iptables –A OUTPUT –j MMLAN
5.
Execute the iptables -L command, and confirm that the MMLAN chains
added to the INPUT and OUTPUT chains are not interrupted by the
previous REJECT, DROP, or other settings.
Example of settings:
# iptables –L
Chain INPUT (policy ACCEPT)
target prot opt source
destination
ACCEPT all -- 0.0.0.0/0
0.0.0.0/0 state
RELATED,ESTABLISHED
ACCEPT icmp -- 0.0.0.0/0
0.0.0.0/0
ACCEPT all -- 0.0.0.0/0
0.0.0.0/0
ACCEPT tcp -- 0.0.0.0/0
0.0.0.0/0 state NEW tcp dpt:22