[Nufw-users] iptables !!!

[jellad tarek]

before trying NuFw i like to try iptables  but i have 2 prob :

I have this case

machine "lan"  ---------------------------------- gateway(+squid) ---------------------   internet
192.168.2.2                                         192.168.2.1  
           
note :  the machine "lan" can access to internet (==>  no prob with squid)

*) first problem
1) in the gateway if i write :
iptables -A OUTPUT -s 192.168.2.0/24 -p tcp  -m state --state NEW,ESTABLISHED -j DROP
==> the machine "lan" can't access internet and it's logic
2) but when i write this :
iptables -A OUTPUT -s 192.168.2.2 -p tcp  -m state --state NEW,ESTABLISHED -j DROP
==>the machine "lan" can access internet !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! why??

*) second problem
if i write this (in the getway):
iptables -A OUTPUT -s 192.168.2.0/24 -p tcp  -m state --state NEW,ESTABLISHED -j DROP
==> the machine "lan" can't access internet 
and whene i add --dport 80 like this :
iptables -A OUTPUT -s 192.168.2.0/24 -p tcp  
--dport 80  -m state --state NEW,ESTABLISHED -j DROP
==>the machine "lan" can access internet !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
why ???
thanks