0

This question already has an answer here:

I have iptables rules on 10.04 and older versions of Ubuntu, with which (iptebles-restore < /folder/file_ipt_rules) internet is working, they are:

*filter
:INPUT DROP [0:0]
:FORWARD DROP [0:0]
:OUTPUT DROP [0:0]
-A INPUT -m iprange --dst-range 192.168.0.0-192.168.1.255 -m limit --limit1/minute --limit-burst 1 -m state --state NEW -j LOG --log-prefix " INPUT STATE NEW " 
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT 
-A OUTPUT -d 217.212.254.0/24 -j DROP 
-A OUTPUT -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT 
COMMIT

This ruleset drops new connections to my Desktop because it is allowed only related and established connections (-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT) and logs attempts of new connections to /var/log/messages (old versions of Ubuntu!) But, this set of rules drops internet on 16.10. Why? P.S. Against hackers works excellent. Only from time to time I am tired of DDoS attacks.

marked as duplicate by kyodake, karel, Yaron, Eric Carvalho, WinEunuuchs2Unix Aug 3 '17 at 0:39

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

  • Please if your using Uubuntu 16.10 use the ufw to avoid iptables – George Udosen Aug 1 '17 at 19:34
  • for Iptables, please. Iptables is the greatest security thing I know (noscript addon, too) – Dmytro Aug 1 '17 at 19:46
  • See at: askubuntu.com/questions/119393/… – kyodake Aug 2 '17 at 0:07
  • 1
    @kyodake this is not duplicate of the links you provide and they don't face the issue here.. this question is not about how to save or restore version of iptables setup but is about why a certain iptables setup doesn't work on 16.10 while it did work on former versions – derHugo Aug 2 '17 at 5:48
  • 1
    Anyway: 16.10 is dead and not supported anymore. Please use Ubuntu 16.04. or 17.04. – derHugo Aug 2 '17 at 5:49