4

I am using vuurmuur to set up iptables. It does not allow to create a rule where source and destination are both 'firewall' (meaning this particular host). How do I make all connections featuring the firewall host calling itself (which means ip-based client-server software communication, like a database server and an application server) trusted and allowed?

Improve this question

1 Answer 1

Reset to default
7

The INPUT and OUTPUT table concern the local machine itself receiving and sending packets respectively, no matter which interface or address is involved. You probably want a rule that accepts everything received from interface lo in INPUT, and accepts everything sent on interface lo in OUTPUT. In plain iptables:

iptables -A INPUT -i lo -j ACCEPT
iptables -A OUTPUT -o lo -j ACCEPT

If you are using addresses other than localhost (or 127.0.0.1), then you may need specific rules. But if so, perhaps you can explain the reason why you are using such addresses, because your problem domain may very well end up matching your network domain. (Or at least make you consider other options.)

Improve this answer
1
  • I've got daemon which will very much probable (yes, I'm not very professional in Linux administration yet) use some other services (Firebird database and something else maybe) running on the same machine using address of the openvpn (tun0) interface for example. Maybe some more issues there are. Firewall log does not show me, but after setting up the firewall it stopped functioning correctly, and I need it upp and running urgently.
    – Ivan
    Jun 29, 2010 at 0:59

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .