From mboxrd@z Thu Jan 1 00:00:00 1970 From: Scott Mayo Subject: Re: Filtered Port Date: Tue, 31 Jan 2006 09:06:25 -0600 Message-ID: <43DF7CF1.4060607@mail.bloomfield.k12.mo.us> References: <43DF6C38.6010204@mail.bloomfield.k12.mo.us> <61929.193.173.147.3.1138716397.squirrel@webmail.sterenborg.info> <43DF7196.6070606@mail.bloomfield.k12.mo.us> <58058.193.173.147.3.1138718408.squirrel@webmail.sterenborg.info> Reply-To: sgmayo@mail.bloomfield.k12.mo.us Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <58058.193.173.147.3.1138718408.squirrel@webmail.sterenborg.info> List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-bounces@lists.netfilter.org Errors-To: netfilter-bounces@lists.netfilter.org Content-Type: text/plain; charset="us-ascii"; format="flowed" To: netfilter@lists.netfilter.org Rob Sterenborg wrote: > On Tue, January 31, 2006 15:17, Scott Mayo wrote: > >>Rob Sterenborg wrote: >> >>>On Tue, January 31, 2006 14:55, Scott Mayo wrote: >>> >>> >>>>I am not sure if this is my iptables or not, but I am not sure where >>>>else to look or ask. I am trying to use Remote Desktop on a >>>>computer. From inside my network, it works fine, but once I get >>>>outside, I cannot use it. I have set my IPTABLES to forward >>>>anything >>>>going to port 3389 to the computer that is using Remote Desktop. >>>> >>>>The problems seems to be that port 3389 is filtered. I can find >>>>nothing in my iptables where I have this port filtered. Are there >>>>some generic ports, that IPTABLES filters on it own or something? >>>>If >>>>the IPTABLES are not filtering it, what else could be? >>> >>> >>>You allow forwarding to this host but you also need to DNAT these >>>packets from the internet IP to the IP of your computer. >>> >>>$ipt -t nat -A PREROUTING -i -d \ >>> -p tcp --dport 3389 -j DNAT --to >>> >>Maybe I used the wrong word when I said 'forward'. This is the rule >>that I have in place and it does not seem to be working. I assumed >>that it was because the port is filtered, or that is what NMAP tells >>me when I run it. >> >>I still have no idea why port 3389 is shown as being filtered. I >>have no rules in my iptables that explicitly filter it. > > > In that case you may want to allow forwarding ;-).. > > $ipt -A FORWARD -i -o -d \ > -p tcp --dport 3389 -j ACCEPT > This did not let it go through either. It must not be the iptables causing it. I took everything out of my rules except for the PREROUTING rule above and my POSTROUTING rule for SNAT and I am getting the same thing. I am not sure what else would be blocking this, unless it is the upstream ISP. I don't think it is, but I have sent them an email to make sure. Only thing this machine is used for is to be a filter using IPTABLES, Squid and Dansguardian. Hopefully it has something to do with my ISP, but I really doubt it. Thanks for the help. -- Scott Mayo Technology Coordinator Bloomfield Schools PH: 573-568-5669 FA: 573-568-4565 Pager: 800-264-2535 X2549 Duct tape is like the force, it has a light side and a dark side and it holds the universe together.