All of lore.kernel.org
 help / color / mirror / Atom feed
From: Scott Mayo <sgmayo@mail.bloomfield.k12.mo.us>
To: netfilter@lists.netfilter.org
Subject: Re: Filtered Port
Date: Tue, 31 Jan 2006 08:26:48 -0600	[thread overview]
Message-ID: <43DF73A8.6030601@mail.bloomfield.k12.mo.us> (raw)
In-Reply-To: <43DF70BC.8010804@rlworkman.net>

Robby Workman wrote:
> Rob Sterenborg wrote:
> 
>> On Tue, January 31, 2006 14:55, Scott Mayo wrote:
>>
>>> I am not sure if this is my iptables or not, but I am not sure where
>>> else to look or ask.  I am trying to use Remote Desktop on a
>>> computer.  From inside my network, it works fine, but once I get
>>> outside, I cannot use it.  I have set my IPTABLES to forward anything
>>> going to port 3389 to the computer that is using Remote Desktop.
>>>
>>> The problems seems to be that port 3389 is filtered.  I can find
>>> nothing in my iptables where I have this port filtered.  Are there
>>> some generic ports, that IPTABLES filters on it own or something?  If
>>> the IPTABLES are not filtering it, what else could be?
>>
>>
>> You allow forwarding to this host but you also need to DNAT these
>> packets from the internet IP to the IP of your computer.
>>
>> $ipt -t nat -A PREROUTING -i <if_inet> -d <ip_inet> \
>>   -p tcp --dport 3389 -j DNAT --to <ip_controlled_host>
> 
> 
> <apology>Rob, sorry for sending this to you first - I always forget to
> fix that...</apology>
> 
> If it still doesn't work, it's quite possible that your ISP is filtering 
>  that port upstream of you.
> 
> RW
> 

But I get on the server itself and do an nmap from itself, and it shows 
that it is filtered.  If the ISP was filtering, would NMAP still show that?

-- 
Scott Mayo
Technology Coordinator
Bloomfield Schools
PH: 573-568-5669
FA: 573-568-4565
Pager: 800-264-2535 X2549

Duct tape is like the force, it has a light side and a dark side and it
holds the universe together.


  reply	other threads:[~2006-01-31 14:26 UTC|newest]

Thread overview: 14+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2006-01-31 13:55 Filtered Port Scott Mayo
2006-01-31 14:06 ` Rob Sterenborg
2006-01-31 14:14   ` Robby Workman
2006-01-31 14:26     ` Scott Mayo [this message]
2006-01-31 14:17   ` Scott Mayo
2006-01-31 14:28     ` /dev/rob0
2006-01-31 14:40     ` Rob Sterenborg
2006-01-31 15:06       ` Scott Mayo
2006-01-31 15:44         ` Robby Workman
2006-02-01 14:58         ` Robb Bossley
2006-01-31 14:24 ` /dev/rob0
2006-01-31 14:29   ` Scott Mayo
2006-01-31 15:35 ` Burak Ozgoren
2006-01-31 18:26   ` Rob Sterenborg

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=43DF73A8.6030601@mail.bloomfield.k12.mo.us \
    --to=sgmayo@mail.bloomfield.k12.mo.us \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.