You are not logged in.

#1 2013-02-19 12:26:43

Grant
Member
From: Italy
Registered: 2012-12-15
Posts: 216

dhcpcd and iptables issues

Hello.
I have this iptables configuration:

:INPUT DROP [80:92386]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [15763:850532]
-A INPUT -i eth0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i eth0 -p icmp -m icmp --icmp-type 8 -j DROP

I set iptables to start at the kernel boot, with

systemctl enable iptables

But there is a problem: I must do the login with the virtual console and give startx. Else I have to wait a lot of time. How can I know that the problem is iptables? Simply because disabling it there are no problems.
I think the conflict is with dhcpcd, I'm not sure.
How can I solve?

Regards.


I am not a native speaker. If you see a mistake, please report it to me via private message. Thank you.

Offline

#2 2013-02-19 22:45:39

the sad clown
Member
From: 192.168.0.X
Registered: 2011-03-20
Posts: 833

Re: dhcpcd and iptables issues

Have you tried 'systemd-analyze blame'?


I laugh, yet the joke is on me

Offline

#3 2013-02-19 23:18:17

R00KIE
Forum Moderator
From: Between a computer and a chair
Registered: 2008-09-14
Posts: 3,281

Re: dhcpcd and iptables issues

You need to allow incoming connections from the loopback (lo) device.


R00KIE
Tm90aGluZyB0byBzZWUgaGVyZSwgbW92ZSBhbG9uZy4K

Offline

#4 2013-02-20 21:34:27

Grant
Member
From: Italy
Registered: 2012-12-15
Posts: 216

Re: dhcpcd and iptables issues

R00KIE wrote:

You need to allow incoming connections from the loopback (lo) device.

A thing like this:

# iptables -A input -i lo -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT

?
@the sad clown
What you said shows the softwares' boot time at the boot. Why should be useful?


I am not a native speaker. If you see a mistake, please report it to me via private message. Thank you.

Offline

#5 2013-02-20 23:23:07

R00KIE
Forum Moderator
From: Between a computer and a chair
Registered: 2008-09-14
Posts: 3,281

Re: dhcpcd and iptables issues

I was thinking more like

# iptables -A input -i lo -j ACCEPT

Check the wiki page about setting up a simple firewall, it will give you more ideas: https://wiki.archlinux.org/index.php/Si … l_Firewall


R00KIE
Tm90aGluZyB0byBzZWUgaGVyZSwgbW92ZSBhbG9uZy4K

Offline

Board footer

Powered by FluxBB