Allow incoming connection from LAN about archtorify HOT 7 CLOSED

Hi @solisinvictum
To allow internal network connections you must enter the IP address or the range of IP addresses in the iptables rules using the ACCEPT value, you need to modify the iptables.rules file, e.g.:

iptables -A INPUT -s 192.168.0.178 -j ACCEPT

When 192.168.0.178 is the IP address you want to whitelist, see: https://man.archlinux.org/man/iptables.8

This may have security implications, see: https://security.stackexchange.com/questions/189474/why-is-dhcp-considered-insecure

from archtorify.

Sry for the late answer!

Thanks for the Info. I give it a look.

Could this be implemented as a option? Simply to look in what Range the Machine archtorify runs on is and then to whitelist this? --allow-lan for example or something.

from archtorify.

Thank you for the advice, I will consider this change.

from archtorify.

Thanks,

that would be really great! :)

from archtorify.

Im doing something wrong.

I added

-A INPUT -s 192.168.5.0/24 -j ACCEPT

on the last position (before commit) into the file /usr/share/archtorify/data/iptables.rules

and iptables -L shows thats its active. But still cant access this machine from other machine in same lan.

-A INPUT -s 192.168.5.205 -j ACCEPT

didnt worked too. First thought i need to create OUTPUT ones too, but that didnt helped either.

from archtorify.

Use the -A and OUTPUT with -d (destination) parameters, this instruction must be inserted after the last instruction of this chain (after the line 29):

--ipv4 -A OUTPUT -d 192.168.5.0/24 -j ACCEPT

I suggest you to understand first how iptables works, see:

https://man.archlinux.org/man/iptables.8

https://www.digitalocean.com/community/tutorials/iptables-essentials-common-firewall-rules-and-commands

from archtorify.

Thanks for the hint.

But its still not working. I even added INPUT Rules accordingly the manuals you delivered:

I give it further investigation.

from archtorify.