A thousand thanks for your valuable hint! I created the file /etc/rc.d/rc.firewall as follows:
#ref: linux firewalls by r l ziegler, techmedia
#file: /etc/rc.d/rc.firewall
symbolic constants used:
EXTERNAL_INTERFACE="eth0" # internet-connected interface
LOOPBACK_INTERFACE="lo" # however your system names it
IPADDR="192.168.0.6" # your IP address
ANYWHERE="any/0" # match any IP address
MY_ISP="202.54.96.1" # ISP server & NOC address range
LOOPBACK="127.0.0.1/8" # reserved loopback address range
CLASS_A="10.0.0.0/8" # class A private networks
CLASS_B="172.16.0.0/12" # class B private networks
CLASS_C="192.168.0.0/16" # class C private networks
CLASS_D_MULTICAST="224.0.0.0/4" # class D multicast address
CLASS_E_RESERVED_NET="240.0.0.0/5" # class E reserved address
BROADCAST_SRC="0.0.0.0" # broadcast.source address
BROADCAST_DEST="255.255.255.255" # broadcast destination address
PRIVPORTS="0:1023" # well-known, privileged port range
UNPRIVPORTS="1024:65535" # unprivilged port range
flush any existing rules from all chains
ipchains -F
unlimited traffic on loopback interface
ipchains -A input -i $LOOPBACK_INTERFACE -j ACCEPT
ipchains -A output -i $LOOPBACK_INTERFACE -j ACCEPT
allow incoming telnet access to your local server
ipchains -A input -i $EXTERNAL_INTERFACE -p tcp -s $ANYWHERE $UNPRIVPORTS \
-d $IPADDR 23 -j ACCEPT
ipchains -A output -i $EXTERNAL_INTERFACE -p tcp ! -y -s $IPADDR 23 \
-d $ANYWHERE $UNPRIVPORTS -j ACCEPT
allow incoming FTP requests
ipchains -A input -i $EXTERNAL_INTERFACE -p tcp -s $ANYWHERE $UNPRIVPORTS \
-d $IPADDR 21 -j ACCEPT
ipchains -A output -i $EXTERNAL_INTERFACE -p tcp ! -y -s $IPADDR 21 \
-d $ANYWHERE $UNPRIVPORTS -j ACCEPT
normal mode FTP data channel responses
ipchains -A output -i $EXTERNAL_INTERFACE -p tcp -s $IPADDR 20 \
-d $ANYWHERE $UNPRIVPORTS -j ACCEPT
ipchains -A input -i $EXTERNAL_INTERFACE -p tcp ! -y \
-s $ANYWHERE $UNPRIVPORTS -d $IPADDR 20 -j ACCEPT
passive mode FTP data channel responses
ipchains -A input -i $EXTERNAL_INTERFACE -p tcp \
-s $ANYWHERE $UNPRIVPORTS -d $IPADDR $UNPRIVPORTS -j ACCEPT
ipchains -A output -i $EXTERNAL_INTERFACE -p tcp ! -y \
-s $IPADDR $UNPRIVPORTS -d $ANYWHERE $UNPRIVPORTS -j ACCEPT
allowing remote access to a local web server
ipchains -A input -i $EXTERNAL_INTERFACE -p tcp \
-s $ANYWHERE $UNPRIVPORTS -d $IPADDR 80 -j ACCEPT
ipchains -A output -i $EXTERNAL_INTERFACE -p tcp ! -y \
-s $IPADDR 80 -d $ANYWHERE $UNPRIVPORTS -j ACCEPT
installng the firewall
chown root.root /etc/rc.d/rc.firewall
chmod ug=rwx /etc/rc.d/rc.firewall
sh /etc/rc.d/rc.firewall
And my LAN works beautifully now! A million thanks!
m r rao