chef-cookbooks / iptables

Development repository for Chef Cookbook iptables
https://supermarket.chef.io/cookbooks/iptables
Apache License 2.0
102 stars 141 forks source link

Can't use INPUT chain on the filter table when using this cookbook? #23

Closed Maniacal closed 8 years ago

Maniacal commented 9 years ago

I was trying to add a rule for ssh which I put into my template like:

-A INPUT -p tcp --dport 22 -j ACCEPT

But it appears as if this rule: -A INPUT -j FWR trumps my rule and sends everything to the FWR chain. My rule works if I put '-A FWR' instead but the documentation isn't clear that that is required when using this cookbook.

Am I doing something wrong? Is it possible to add to the INPUT chain in the filter table?

Whatever the answer is I'll follow up with a pull request to make the documentation more clear (unless it's there and I'm just missing it)

Thanks,

MG

lamont-granquist commented 8 years ago

this has been open for nearly 2 years, i hope you eventually figured it out by now....