Writing firewall rules with iptables

Hi All,

I am writing firewell rules using iptables to allow icmp traffic
from 211.xxx.117.211 to
211.41.125.4 and vice versa . For this I have written rule 2 and
3. But after writing the rule
I cannot ping from either ends. But if I stop the firewall , it
pings . That means the network
is O.K but there is some problem with the rules that I have
written .

Please tell me how to write the rule correctly.

[root@localhost ~]# iptables -L -n
Chain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT all -- 127.0.0.1 0.0.0.0/0
ACCEPT icmp -- 211.xxx.117.211 211.41.125.4
ACCEPT icmp -- 211.41.125.4 211.xxx.117.211
ACCEPT icmp -- 211.xxx.117.0/24 211.xxx.117.211
ACCEPT tcp -- 211.xxx.117.0/28 211.xxx.117.211 tcp dpt:
22
ACCEPT udp -- 211.xxx.117.211 211.41.99.3 udp dpt:
53
ACCEPT udp -- 211.41.99.3 211.xxx.117.211 udp spt:
53
ACCEPT tcp -- 211.xxx.117.211 0.0.0.0/0 tcp dpt:
80
ACCEPT tcp -- 0.0.0.0/0 211.xxx.117.211 tcp spt:
80
REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-
with icmp-port-unreachable

Chain FORWARD (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

Chain RH-Firewall-1-INPUT (0 references)
target prot opt source destination



With Thanks.

.

Relevant Pages

  • Re: Writing firewall rules with iptables
    ... I am writing firewell rules using iptables to allow icmp traffic ... Chain FORWARD ... The INPUT rules tell the firewall to accept ICMP packets for 211.xxx.117.211 and 211.41.125.4. ... Remember that the iptables ACCEPT chain is used to accept/reject packets destined for the machine running iptables. ...
    (comp.os.linux.misc)
  • INPUT vs. FORWARD for icmp
    ... the router itself, and also to machines behind the router. ... the same action for inside hosts, I have to perform it on ... First, why aren't the ICMP packets being ... hit on the INPUT chain? ...
    (comp.os.linux.networking)