<div dir="ltr">My previous INPUT policy was ACCEPT. I'm attempting to limit access to a machine to specific subnets (<a href="http://4.3.2.0/24">4.3.2.0/24</a>), So I added a couple rules for that (including one to allow LDAP traffic over port 636), then set the INPUT policy to DROP. From that point on I can't access any external content. The OUTPUT policy is ACCEPT. If I change the INPUT policy back to ACCEPT, I can again access external content. <div>
<br></div><div>Here's the ruleset: </div><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><div><pre><code>Chain INPUT (policy DROP 461 packets, 81259 bytes)</code></pre></div><div><pre><code>num pkts bytes target prot opt in out source destination </code></pre>
</div><div><pre><code>1 11835 1095K fail2ban-SSH tcp -- * * <a href="http://0.0.0.0/0">0.0.0.0/0</a> <a href="http://0.0.0.0/0">0.0.0.0/0</a> tcp dpt:22 </code></pre></div><div><pre><code>2 2972K 1083M ACCEPT all -- * * <a href="http://4.3.2.0/24">4.3.2.0/24</a> <a href="http://0.0.0.0/0">0.0.0.0/0</a> </code></pre>
</div><div><pre><code>3 0 0 ACCEPT tcp -- * * <a href="http://0.0.0.0/0">0.0.0.0/0</a> <a href="http://0.0.0.0/0">0.0.0.0/0</a> tcp dpt:636 </code></pre></div><div><pre><code>4 3747K 436M ACCEPT all -- * * <a href="http://0.0.0.0/0">0.0.0.0/0</a> <a href="http://0.0.0.0/0">0.0.0.0/0</a> state RELATED,ESTABLISHED </code></pre>
</div><div><pre><code>
</code></pre></div><div><pre><code>Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)</code></pre></div><div><pre><code>num pkts bytes target prot opt in out source destination </code></pre>
</div><div><pre><code>
</code></pre></div><div><pre><code>Chain OUTPUT (policy ACCEPT 89676 packets, 26M bytes)</code></pre></div><div><pre><code>num pkts bytes target prot opt in out source destination </code></pre>
</div><div><pre><code>
</code></pre></div><div><pre><code>Chain fail2ban-SSH (1 references)</code></pre></div><div><pre><code>num pkts bytes target prot opt in out source destination </code></pre></div><div>
<pre><code>1 11776 1092K RETURN all -- * * <a href="http://0.0.0.0/0">0.0.0.0/0</a> <a href="http://0.0.0.0/0">0.0.0.0/0</a> </code></pre></div></blockquote><div><pre><br></pre><pre>Any idea what in here could be causing the holdup? </pre>
<pre><br></pre></div></div>