when to use FORWARD chain ? -- plz help

[kcpant]

Hi Maaz,

When you are going to define a policy for a chain, you don't have to use target (-j) keyword, instead, you have to use:
iptables -P

This "-P" switch defines that it is a policy option, and it is applicable to the whole chain.

(SEP, you are very senior to us, but, as I know, -j switch is not used in defining policies, only -P is used. please guide us if I'm incorrect)

[Maaz]

nice explanation dear kcpant ;) thanx

Thanx All
Regards
Maaz

[Alexander Samad]

Hi

On a side note, I presume you have more to your firewall than the 2 lines on eth1, because if I send a packet destined for the internal 10/8 network your firewall is going to let it through! because your default FORWARD is ACCEPT

Alex