Score:0

Linux/Android devices connected by WiFi require iptables to add NEW state in FORWARD chain for external interface to connect to internet

br flag

Iptables rule for external interface (ens33 has a public IP):

iptables -A FORWARD -i ens33 -m state --state ESTABLISHED,RELATED -j ACCEPT

allows access to internet for all computers connected to wired LAN and Windows laptops connected by a wireless Access Point. But Android smartphones and Linux laptops connected by the same WiFi AP have a problem "connected, but no internet" - they have access to all local computers, but not to internet. If I change above rule to:

iptables -A FORWARD -i ens33 -m state --state ESTABLISHED,RELATED,NEW -j ACCEPT

then all devices have access to internet.

Why do Linux/Android wireless devices require adding a "NEW" state to connect to internet?

Here is a complete iptables script: iptables_tests.sh

Networks in the script:

10.215.121.0 - our internal network for all devices, wired and wireless

10.121.216.0 - our VPN network for remote workers

10.171.172.0 - second company network, VPN tunnel 1

10.10.3.19 - third company server, VPN tunnel 2

br flag
I left a new rule "FORWARD ... NEW" as it is above - I don't like this, but I have no idea, what better configuration could I use.
mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.