All of lore.kernel.org
 help / color / mirror / Atom feed
From: Michele Petrazzo - Unipex srl <michele.petrazzo@unipex.it>
To: "Roland Häder" <r.haeder@web.de>
Cc: netfilter@vger.kernel.org
Subject: Re: Bastille/netfilter with Linux 2.6.28 blocks connections
Date: Mon, 05 Jan 2009 12:47:38 +0100	[thread overview]
Message-ID: <4961F35A.8030207@unipex.it> (raw)
In-Reply-To: <662506031@web.de>

Roland Häder wrote:
> Hi together,
> 

Hi!

> I have a Debian Unstable (Sid) here with vanilla kernel 2.6.28. I use
>  the Bastille firewall script to setup firewall rules.
> 
> When I now start a service e.g. Tor which needs open ports at 9001 
> and 9030 it can connect to itself when the firewall is done.
> 

Why you said "now". It has never worked? When it's start to had problems?

> But when I start it it's self-connections got blocked.
> 
> Here is my ruleset exported with "iptables-save > iptables.list": 
> http://www.mxchange.org/downloads/firebox/iptables.list
> 

You have to say us what you want to leave pass from that firewall... tor
from internet, from lan? tor on localhost wants to connect to your-self
by 127 or 192 ?
Too short description and no logs.
Past the "INPUT DROP 10" drop syslog or add some logging "debug" rules
around and see why it's not pass
Masq from .. to... ?

Michele


  reply	other threads:[~2009-01-05 11:47 UTC|newest]

Thread overview: 17+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2009-01-03 21:02 Bastille/netfilter with Linux 2.6.28 blocks connections Roland Häder
2009-01-05 11:47 ` Michele Petrazzo - Unipex srl [this message]
  -- strict thread matches above, loose matches on Subject: below --
2009-01-05 13:41 Roland Häder
2009-01-05 14:37 ` Michele Petrazzo - Unipex srl
2009-01-07 15:16 ` Mart Frauenlob
2009-01-05 16:37 Roland Häder
2009-01-07  8:51 ` Michele Petrazzo - Unipex srl
2009-01-05 16:52 Roland Häder
2009-01-07 15:45 Roland Häder
2009-01-07 19:43 ` Mart Frauenlob
2009-01-07 20:04 Roland Häder
2009-01-07 20:15 ` Mart Frauenlob
2009-01-07 21:04 Roland Häder
2009-01-07 21:09 Roland Häder
2009-01-07 21:55 Roland Häder
2009-01-07 22:16 ` Mart Frauenlob
2009-01-07  1:16   ` Roland Haeder

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=4961F35A.8030207@unipex.it \
    --to=michele.petrazzo@unipex.it \
    --cc=netfilter@vger.kernel.org \
    --cc=r.haeder@web.de \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.