Re: Operation not permitted

My iptables rules are the following:

iptables -A OUTPUT -m state --state NEW,ESTABLISHED,RELATED,INVALID -j ACCEPT
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

The first one allows me to send the nmap packets and the last allows me to
receive the answer. I donīt see any risk in allowing INVALID packets on the
OUTPUT chain. I can see problems if you allow it on the INPUT chain.

jabbur

On Monday 02 May 2005 11:51, Przemek wrote:
> On Mon, 2 May 2005 11:15:39 -0300
>
> Marlon Jabbur <msjabbur_at_uol.com.br> wrote:
> > Check your iptables rules. If you're using the "state" module you
> > need to permit yourself to send "INVALID" packets.
>
> Now It works but can I not allow INVALID on OUTPUT chain ?

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Received on May 02 2005