IPTables [RESOLVIDO]

lipesmile
(usa Ubuntu)

Enviado em 10/06/2016 - 17:04h

Boa tarde, eu configurei o IPtables e o forward esta ok, mas as maquinas que estão atrás do firewall não conseguem acessar internet e nem o firewall em si consegue, eu tentei liberar as portas 80 e 443 porém nada ainda.

Segue o meu iptables -L

Chain INPUT (policy DROP)

target     prot opt source               destination         

ACCEPT     all  --  anywhere             anywhere             ctstate RELATED,ESTABLISHED



Chain FORWARD (policy DROP)

target     prot opt source               destination         

ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:http

ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:http

ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:81

ACCEPT     udp  --  anywhere             anywhere             udp dpt:rtsp

ACCEPT     udp  --  anywhere             anywhere             udp dpt:8000

ACCEPT     udp  --  anywhere             anywhere             udp dpt:http

ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:rtsp

ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:8000

ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:http

ACCEPT     all  --  anywhere             anywhere             ctstate RELATED,ESTABLISHED

ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:http

ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:https

ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:submission

ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:smtp

ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:pop3

ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:domain

ACCEPT     udp  --  anywhere             anywhere             udp dpt:domain

ACCEPT     icmp --  anywhere             anywhere            

ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:ssh



Chain OUTPUT (policy DROP)

target     prot opt source               destination         

ACCEPT     udp  --  anywhere             anywhere             udp dpt:domain

ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:domain

ACCEPT     udp  --  anywhere             anywhere             udp dpt:ssh

ACCEPT     icmp --  anywhere             anywhere            

 

Resolvi colocando essas linhas
iptables -A OUTPUT -p tcp --dport 53 -j ACCEPT
iptables -A OUTPUT -p udp --dport 53 -j ACCEPT
iptables -A OUTPUT -p tcp --dport 80 -j ACCEPT
iptables -A OUTPUT -p tcp --dport 443 -j ACCEPT
iptables -A OUTPUT -p icmp -j ACCEPT