Thread: iptables blocking all traffic

hi all,

i'm using ubuntu 10.4 64bit on vmware

have bit of problem iptable rules , i'm wondering if can point me in right direction.

anyway i've written rules , saved them file iptable.rules in /etc.

issue iptables-save > /etc/iptables.rules , check file , rule saved nicely , traffic ip's not on whitelist dropped should. can run iptables -l -v , see rules there , working.

here rules have setup (minus actual ip's i've white listed):-

iptables -p input accept
iptables -f
iptables -a input -i lo -j accept
iptables -a input -m state --state established,related -j accept
iptables -a input -s some.ip.here -j accept
iptables -p input drop
iptables -p forward drop
iptables -p output accept

have set amount of ip's wanted white listed else gets dumped.


works nicely few days or of sudden starts dropping packets ip's in white list. these ip's sending fair amount of traffic server cant see why cause ip's blocked.

have ossec installed logs arent showing rules applied these ip's , have ip's setup in global white list ossec also.

can point me in right direction on i'm doing wrong here?

advice appreciated.

i recommend using tcpdump troubleshoot problem. create new chains white listed servers log traffic. either way, need more information.

suspicion white listed servers falling under established/related category , when connections reset @ arbitrary interval, seeing connection failures.

--
know linux?

Forum The Ubuntu Forum Community Ubuntu Specialised Support Ubuntu Servers, Cloud and Juju Server Platforms [ubuntu] iptables blocking all traffic

Ubuntu