DKWSLabs

Madfisht3

-P INPUT DROP
-P FORWARD DROP
-P OUTPUT ACCEPT
-A INPUT -i eth1 -m mac --mac-source 00:E0:52:A6:92:70 -j ACCEPT
-A INPUT -i eth1 -m mac --mac-source 00:1A:4D:FE:72:69 -j ACCEPT
-A INPUT -i ppp0 -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i ppp0 -m state --state NEW -j LOG --log-prefix "packets_ppp0_new"
-A INPUT -i ppp0 -m state --state INVALID -j REJECT --reject-with icmp-proto-unreachable
-A FORWARD -s 192.168.0.0/24 -i eth0 -o eth1 -m state --state NEW -j ACCEPT
-A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -s 192.168.0.0/24 -i eth0 -o eth1 -m state --state NEW -j ACCEPT
-A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -o ppp0 -m mac --mac-source 00:E0:52:A6:92:70 -j ACCEPT
-A FORWARD -o ppp0 -m mac --mac-source 00:1A:4D:FE:72:69 -j ACCEPT
_________________

ruslan89

-A FORWARD -s 192.168.0.0/24 -i eth0 -o eth1 -m state --state NEW -j ACCEPT
-A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT

Зачем два раза?

Madfisht3

C 2-ух скриптов просто правила добавляются. Упущение Embarassed

_________________