1
1
When I do iptables -P OUTPUT DROP
it blocks DDWRT's web interface.
That is I am not able to access http://192.168.1.1
via Firefox.
I put this rules before changing the chain policy to drop:
iptables -I OUTPUT 1 -p tcp --dport 53 -j ACCEPT
iptables -I OUTPUT 2 -p udp --dport 53 -j ACCEPT
iptables -I OUTPUT 3 -p tcp --dport 80 -j ACCEPT
iptables -I OUTPUT 4 -p tcp --dport 443 -j ACCEPT
Why is iptables -P OUTPUT DROP
blocking the management interface?
1you need to accept RELATED,ESTABLISHED outbound packets. – cybernard – 2014-01-24T04:34:56.903