From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <gentoo-user+bounces-147835-garchives=archives.gentoo.org@lists.gentoo.org>
Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80])
	by finch.gentoo.org (Postfix) with ESMTP id 8BFA91381F3
	for <garchives@archives.gentoo.org>; Tue, 21 May 2013 16:01:39 +0000 (UTC)
Received: from pigeon.gentoo.org (localhost [127.0.0.1])
	by pigeon.gentoo.org (Postfix) with SMTP id 0D7FFE0877;
	Tue, 21 May 2013 16:01:30 +0000 (UTC)
Received: from mail-la0-f42.google.com (mail-la0-f42.google.com [209.85.215.42])
	(using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits))
	(No client certificate requested)
	by pigeon.gentoo.org (Postfix) with ESMTPS id B32EBE0870
	for <gentoo-user@lists.gentoo.org>; Tue, 21 May 2013 16:01:28 +0000 (UTC)
Received: by mail-la0-f42.google.com with SMTP id fg20so890207lab.15
        for <gentoo-user@lists.gentoo.org>; Tue, 21 May 2013 09:01:26 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :content-type;
        bh=pfmXLTDaJl30Z4tLOJPwxzQgB2c2Q+fhdHeWmbghmYQ=;
        b=Y/RB9u/DjtSkoxVcnVSHEEuxxw/FhPPi3mipX65/9GNVWuNi6T02uwzFsNBaLksFP1
         69O2SxEpIXU3zCBl38zrctFBhZppaoX9COCaRw5zmb58TxQNbrlmEt1R+exiZx3rEB3B
         FJ9Kfnw8+HDtUs7GCXk5pzxDgjEuFkmkgE3qubmvZioU6r7usI+7qQbKtCSJnq0J0jF3
         hKGm4SPQCTN1eXLg7O4R3SVrT82T4yfx6u8AooheReySjKp4CBj1Dp2X2eJIvvUIGDTf
         xgH4ula6VLOhx+x+8wHaHAJdGJh2NremfXG8GcMQX7iZuUrlbXyjcLy7Xtx3xopU4cQL
         vl1w==
Precedence: bulk
List-Post: <mailto:gentoo-user@lists.gentoo.org>
List-Help: <mailto:gentoo-user+help@lists.gentoo.org>
List-Unsubscribe: <mailto:gentoo-user+unsubscribe@lists.gentoo.org>
List-Subscribe: <mailto:gentoo-user+subscribe@lists.gentoo.org>
List-Id: Gentoo Linux mail <gentoo-user.gentoo.org>
X-BeenThere: gentoo-user@lists.gentoo.org
Reply-to: gentoo-user@lists.gentoo.org
MIME-Version: 1.0
X-Received: by 10.112.205.231 with SMTP id lj7mr1934414lbc.27.1369152086916;
 Tue, 21 May 2013 09:01:26 -0700 (PDT)
Received: by 10.114.92.35 with HTTP; Tue, 21 May 2013 09:01:26 -0700 (PDT)
In-Reply-To: <201305211133.03830.neal.p.murphy@alum.wpi.edu>
References: <CAGWRaZbwp8jDPxDzHX6g_LkpK74iB6K4GSoU7c_5THDSx1oDmQ@mail.gmail.com>
	<201305211133.03830.neal.p.murphy@alum.wpi.edu>
Date: Tue, 21 May 2013 12:01:26 -0400
Message-ID: <CAGWRaZazr2gXcrDFcOaVBCq_Tia7rZOg_DprsTvL-ec5T8dduQ@mail.gmail.com>
Subject: [gentoo-user] Re: IPTables - Going Stateless
From: Nick Khamis <symack@gmail.com>
To: gentoo-user <gentoo-user@lists.gentoo.org>
Content-Type: text/plain; charset=ISO-8859-1
X-Archives-Salt: 39226094-f0cc-4dc4-be35-b704f6e05737
X-Archives-Hash: b4f38aa8660bc6b4617a050350ae587f

For testing purposes I changed the ssh rule to:

-A TCP -p tcp -m tcp --dport 22 -j ACCEPT
-A TCP -p tcp -m tcp -s 0.0.0.0/0 -d 192.168.2.5 --dport 22 -j DROP

And still no go. As mentioned before, everything works fine until I
try to close up the rest of the ports not opened up in the chains
"UDP" and "TCP" stated above:

#echo -e "       - Dropping input TCP and UDP traffic to closed ports"
-A INPUT -i $INTIF1 -p tcp -j REJECT --reject-with tcp-rst
-A INPUT -i $INTIF1 -p udp -j REJECT --reject-with icmp-port-unreachable

#echo -e "       - Dropping output TCP and UDP traffic to closed ports"
-A OUTPUT -o $INTIF1 -p tcp -j REJECT --reject-with tcp-rst
-A OUTPUT -o $INTIF1 -p udp -j REJECT --reject-with icmp-port-unreachable

#echo -e "       - Dropping input traffic to remaining protocols sent
to closed ports"
-A INPUT -i $INTIF1 -j REJECT --reject-with icmp-proto-unreachable

#echo -e "       - Dropping output traffic to remaining protocols sent
to closed ports"
-A OUTPUT -o $INTIF1 -j REJECT --reject-with icmp-proto-unreachable

That is when I cannot SSH over to the server.

N.