Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I am using vuurmuur to set up iptables. It does not allow to create a rule where source and destination are both 'firewall' (meaning this particular host). How do I make all connections featuring the firewall host calling itself (which means ip-based client-server software communication, like a database server and an application server) trusted and allowed?

share|improve this question

1 Answer 1

The INPUT and OUTPUT table concern the local machine itself receiving and sending packets respectively, no matter which interface or address is involved. You probably want a rule that accepts everything received from interface lo in INPUT, and accepts everything sent on interface lo in OUTPUT. In plain iptables:

iptables -A INPUT -i lo -j ACCEPT
iptables -A OUTPUT -o lo -j ACCEPT

If you are using addresses other than localhost (or 127.0.0.1), then you may need specific rules. But if so, perhaps you can explain the reason why you are using such addresses, because your problem domain may very well end up matching your network domain. (Or at least make you consider other options.)

share|improve this answer
    
I've got daemon which will very much probable (yes, I'm not very professional in Linux administration yet) use some other services (Firebird database and something else maybe) running on the same machine using address of the openvpn (tun0) interface for example. Maybe some more issues there are. Firewall log does not show me, but after setting up the firewall it stopped functioning correctly, and I need it upp and running urgently. –  Ivan Jun 29 '10 at 0:59

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.