Re: IPTable Rules... again

[Reindl Harald]

Am 08.03.2012 16:16, schrieb nullv(a)gmx.com:
>  for some reason I can't make a connection to the external mail 
>  server from inside the lan. even from the 10.0.0.3 address which
>  should be allowed to do anything. everything used to work when i 
>  used MASQUERADing but stopped once i switched to SNAT. Can anybody 
>  help me? What am I doing wrong?? 
what you are doing wrong is change working things
the following works perfectly (eth1: WAN, eth0: LAN)

iptables -t filter -P INPUT ACCEPT
iptables -t filter -P FORWARD ACCEPT
iptables -t filter -P OUTPUT ACCEPT
iptables -t nat -P PREROUTING ACCEPT
iptables -t nat -P POSTROUTING ACCEPT
iptables -A FORWARD -i eth1 -d 192.168.1.0/24 -j ACCEPT
ipatbles -A POSTROUTING -t nat -s 192.168.1.0/24 -o eth1 -j MASQUERADE
________________________

what is this????????????????????????

-A INPUT -i eth1 -j ACCEPT

you do not really want input independent of the state

iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT