Re: [Vserver] Postgres, Vserver & Firewall

From: Daniel Hokka Zakrisson <daniel_at_hozac.com>
Date: Sat 21 Oct 2006 - 19:08:24 BST
Message-ID: <453A6218.6080209@hozac.com>

Tim Mecking wrote:
> Never ever block any local traffic. Enter the following lines as root in
> a root-server shell and your problem should be gone:

Unless you actually want to limit your guests' ability to communicate
with eachother (and themselves).

> iptables -I INPUT -i lo -j ACCEPT
> iptables -I OUTPUT -o lo -j ACCEPT
> iptables -I FORWARD -i lo -o lo -j ACCEPT

FORWARD with -i lo -o lo? I'd be inclined to DROP those since that
should never happen.

-- 
Daniel Hokka Zakrisson
GPG id: 06723412
GPG fingerprint: A455 4DF3 990A 431F FECA  7947 6136 DDA2 0672 3412
_______________________________________________
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver
Received on Sat Oct 21 19:08:32 2006
[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Sat 21 Oct 2006 - 19:08:40 BST by hypermail 2.1.8