iptables is like alchemy

[Paweł Brodacki]

2013/1/3 Jorge Fábregas <jorge.fabregas at gmail.com>:
> Ok, I've posted a similar setup I've used in the past that worked like a
> charm.  The script is the actual /etc/sysconfig/iptables.  You'll notice
> the syntax there is somehow different than when you manually create the
> rules (or put in a script) but you get the idea.  Those rules WERE THE
> MINIMUM required in order to let a machine on internet reach a machine
> on the internal network (port 8,555).   Ask me any question if you don't
> understand a line (please specify line number in question).
>
> eth0 is WAN, eth1 is LAN.  Notice how I use "-i" and "-o" for the NICs.
>
> http://fpaste.org/sdPF/
>
>

Hi,

Could you, please, post the actual config? If the configh which you
posted worked for you, then we know there's no error in it. We need to
see the one which has some, you know ;).

It may be something really minor, like a typo, which is very difficult
to spot if you read the text for the umpteenth time, and you know what
you expect to read. It may be, that all it needs is just another pair
of eyes.

As far as what you posted goes, if that script worked for you, then
replacing the port numbers and the destination IP with the ones you
need for ssh would give you ssh connectivity. However, there are no
holes punched in the INPUT chain for DNS or IMAP services, I suppose
that the relevant lines are present in the file which we haven't seen
yet.

HTH,
Paweł