the filter table in my ip tables stats the :INPUT DROP[0:0]
, but when I type sudo iptables -L
, The policy says that it accepts them, I also have a nat table which does accept INPUT, but I even tried doing sudo iptables -t filter -L
in order to ensure I was looking at the filter table.
OS: Raspbian Stretch Lite
/etc/network/iptable
(Shortened the table for simplicity)
*filter
:INPUT DROP [0:0]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [0:0]
COMMIT
*nat
:PREROUTING ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
COMMIT
When I do the following command to show the polices, I get the following results:
sudo iptables -t filter -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
and I check the nat table just to see if that might be having any issues but the nat table seems fine.
sudo iptable - t nat -L
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
I tried rebooting the system to see whether that might have been the issue, but I still end up getting the same results.
iptables
is not what you would expect given the content of the file at/etc/network/iptable
?