[arch-general] iptables forward policy

[Juan Diego Tascón]

Thanks for both replies. The graphic does it a lot more
understandable. Is there any way to debug iptables, I mean, like a
tool where I can visualize the path of a packet and where exactly it
gets dropped/accepted and also realtime packets headers (src, dst,
proto, dport, sport, etc)?

On Sat, Aug 25, 2012 at 12:56 PM, Corrado Primier <ilbardo at gmail.com> wrote:
> 2012/8/25 Juan Diego Tascón <juantascon at gmail.com>:
>> Good day,
>
> Hello :)
>
>> I'm thinking of
>> setting the default FORWARD policy to ACCEPT as my default INPUT
>> policy is DROP and unless there is a valid FORWARD rule for a given
>> port the packets wont go anywhere. I'm I right on this?
>
> You're wrong. Either a packet goes through the INPUT chain or it goes
> through the FORWARD chain, depending on its destination. Take a look
> at this packet flow diagram:
> http://www.linuxhomenetworking.com/wiki/images/f/f0/Iptables.gif
>
> Corrado