iptables not working

[davros1999]

Hi

This is probably something really simple....any rules I add to iptables are having no effect.

The firewall is activated in the GUI, I can't get iptables status from the shell. 'service iptables' just says 'Done'

Here's an example rule I added to attempt to drop all traffic from a Polycom phone. I added the same rule to the INPUT chain and again, no effect.

Chain OUTPUT (policy ACCEPT)
target prot opt source destination
DROP all -- Polycom_0004f25e92de anywhere

If anyone can offer help it'd be great.

Thanks
Dave

 

[octopus]

Try to change from INPUT chain to FORWARD chain. INPUT is for "to router".

 

[davros1999]

Great! That works.

The rules for the FORWARD chain are back to front to how I expected. e.g. To block traffic towards 8.8.8.8 I need to put 8.8.8.8 as the source rather than the destination. But I'm sure there's a good reason for this.

Most important thing is it works.

Thank you very much!