filter packet

Exercise:
Protection of WEB and DNS servers using the context-free rules for packet filtering:

  • Protect your WEB-server, so that would be for him can be accessed by browsers, and could go to dns.
  • Protect your primary DNS-server so that it could be to contact clients and secondary servers.
  • Allow ICMP ping to / from your site (s).
  • the rest is declined.

My solution that:

#service iptables start
#iptables -P INPUT DROP
#iptables -P OUTPUT DROP
#iptables -P FORWARD DROP
#iptables -A INPUT -p icmp --icmp-type echo-request -j ACCEPT
#iptables -A OUTPUT -p icmp --icmp-type echo-reply -j ACCEPT
#service iptables save
#serivce iptables reload

but i don't know why my code doesn't work!!!
can anybody help me?

Do not post classroom or homework problems in the main forums. Homework and coursework questions can only be posted in this forum under special homework rules.

Please review the rules, which you agreed to when you registered, if you have not already done so.

More-than-likely, posting homework in the main forums has resulting in a forum infraction. If you did not post homework, please explain the company you work for and the nature of the problem you are working on.

If you did post homework in the main forums, please review the guidelines for posting homework and repost.

Thank You.

The UNIX and Linux Forums.