Problem with iptables. Access to http and https.

Hi!

I am using, for long time, fwbuilder to build my firewalls.

Now I wanted to allow http and https accesses to one of my computers.
So, I set this on fwbuilder and here are the last two rules it generated:

# RULE 7
$IPTABLES -A FORWARD -i + -p tcp -m tcp -m multiport -d 192.168.1.23
--dports 80,443 -m state --state NEW -j ACCEPT

I also tried (using both directions instead of inbound):
$IPTABLES -A OUTPUT -p tcp -m tcp -m multiport -d 192.168.1.23
--dports 80,443 -m state --state NEW -j ACCEPT
$IPTABLES -A FORWARD -p tcp -m tcp -m multiport -d 192.168.1.23
--dports 80,443 -m state --state NEW -j ACCEPT


RULE 8 denies everything.

When I try to access 192.168.1.23 using my browser dmesg reports this:
[ 6672.650597] RULE 8 -- DENY IN=eth0 OUT= MAC=...:... SRC=192.168.1.35
DST=192.168.1.23 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=56306 DF PROTO=TCP
SPT=40460 DPT=443 WINDOW=29200 RES=0x00 SYN URGP=0

Does anybody know what can be wrong with this?

Thanks

 

Às 14:22 de 07-10-2015, Joe Beanfish escreveu:

I think the problem has somehow to do with -d 192.168.1.23. This ip
address is unnecessary because it is the address of the machine itself.
So I just "told" fwbuilder to allow for inbound from and to local
network and outbound from local network to the "world" (to allow
browsing of external world).
Now everything is working fine although I still don't understand why it
didn't before.

Thanks anyway for responding.
Paulo

 

Paulo da Silva a écrit :

The proper chain for incoming packets is INPUT, not FORWARD nor OUTPUT.