iptables rule does not get added

Question

I'm trying to setup openvpn and I need to add the following rule among others:

iptables -A FORWARD -s 10.8.0.0/24 -d 0/0 -j ACCEPT

but, after adding this rule and running iptables -L I get the following output:

Chain INPUT (policy ACCEPT)
target     prot opt source               destination         
ACCEPT     all  --  anywhere             anywhere            

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         
ACCEPT     all  --  server.hosting.invalid/24  anywhere           

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination 

which clearly states that there is an error in adding that rule or something. It must be a message from my hosting provider. Any idea how can I make that rule working?

Thank you.

Answer 1

ACCEPT     all  --  server.hosting.invalid/24  anywhere           

which clearly states that there is an error in adding that rule or something. 

That isn't necessarily an error. It could just be that you have 10.8.0.0 or something similar defined in your /etc/networks file. It could just be DNS resolution. Try passing -n to iptables to skip the DNS resolution.

In any case given the current state of your firewall you really don't need that rule. Everything is already being accepted. (policy ACCEPT)

Answer 2

It might be invalid subnet for your hosting provider (10.x.x.x is private and unroutable in the Internet). But I belive there isn't any problem here, cause you will be using VPN and 10.x.x.x will be routed locally on your server.