From mboxrd@z Thu Jan  1 00:00:00 1970
From: Scott Mayo <sgmayo@mail.bloomfield.k12.mo.us>
Subject: Re: Filtered Port
Date: Tue, 31 Jan 2006 08:26:48 -0600
Message-ID: <43DF73A8.6030601@mail.bloomfield.k12.mo.us>
References: <43DF6C38.6010204@mail.bloomfield.k12.mo.us>	<61929.193.173.147.3.1138716397.squirrel@webmail.sterenborg.info>
	<43DF70BC.8010804@rlworkman.net>
Reply-To: sgmayo@mail.bloomfield.k12.mo.us
Mime-Version: 1.0
Content-Transfer-Encoding: 7bit
Return-path: <netfilter-bounces@lists.netfilter.org>
In-Reply-To: <43DF70BC.8010804@rlworkman.net>
List-Id: <netfilter.vger.kernel.org>
List-Unsubscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>,
	<mailto:netfilter-request@lists.netfilter.org?subject=unsubscribe>
List-Archive: </pipermail/netfilter>
List-Post: <mailto:netfilter@lists.netfilter.org>
List-Help: <mailto:netfilter-request@lists.netfilter.org?subject=help>
List-Subscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>,
	<mailto:netfilter-request@lists.netfilter.org?subject=subscribe>
Sender: netfilter-bounces@lists.netfilter.org
Errors-To: netfilter-bounces@lists.netfilter.org
Content-Type: text/plain; charset="us-ascii"; format="flowed"
To: netfilter@lists.netfilter.org

Robby Workman wrote:
> Rob Sterenborg wrote:
> 
>> On Tue, January 31, 2006 14:55, Scott Mayo wrote:
>>
>>> I am not sure if this is my iptables or not, but I am not sure where
>>> else to look or ask.  I am trying to use Remote Desktop on a
>>> computer.  From inside my network, it works fine, but once I get
>>> outside, I cannot use it.  I have set my IPTABLES to forward anything
>>> going to port 3389 to the computer that is using Remote Desktop.
>>>
>>> The problems seems to be that port 3389 is filtered.  I can find
>>> nothing in my iptables where I have this port filtered.  Are there
>>> some generic ports, that IPTABLES filters on it own or something?  If
>>> the IPTABLES are not filtering it, what else could be?
>>
>>
>> You allow forwarding to this host but you also need to DNAT these
>> packets from the internet IP to the IP of your computer.
>>
>> $ipt -t nat -A PREROUTING -i <if_inet> -d <ip_inet> \
>>   -p tcp --dport 3389 -j DNAT --to <ip_controlled_host>
> 
> 
> <apology>Rob, sorry for sending this to you first - I always forget to
> fix that...</apology>
> 
> If it still doesn't work, it's quite possible that your ISP is filtering 
>  that port upstream of you.
> 
> RW
> 

But I get on the server itself and do an nmap from itself, and it shows 
that it is filtered.  If the ISP was filtering, would NMAP still show that?

-- 
Scott Mayo
Technology Coordinator
Bloomfield Schools
PH: 573-568-5669
FA: 573-568-4565
Pager: 800-264-2535 X2549

Duct tape is like the force, it has a light side and a dark side and it
holds the universe together.