From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Shaheen Hossain" Date: Thu, 06 Feb 2003 13:38:54 +0000 Subject: [LARTC] iptables : Incoming mail and ping problem MIME-Version: 1 Content-Type: multipart/mixed; boundary="----=_NextPart_000_0009_01C2CE17.624F9EB0" Message-Id: List-Id: To: lartc@vger.kernel.org This is a multi-part message in MIME format. ------=_NextPart_000_0009_01C2CE17.624F9EB0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Diff between File I ( iptablesRC ) and File II (iptablesRC.2). File I = works for incoming mail. File II does not for incoming mail, neither = does pinging to this server to its external interface NIC IP.=20 I could not figure out what the difference in these port allowing, = reject or accept commands which are keeping the in-coming mail from = coming on a RH Linux 7.3. Please help. Thanks. -------------------------------------------------------------------------= ----- [shossain@mohican shossain]$ diff /home/admin/firewall/iptablesRC = /home/admin/firewall/iptablesRC.2 | more 162c162 < $IPTABLES -A allowed -p TCP -j REJECT --- > $IPTABLES -A allowed -p TCP -j DROP 185,187c185,187 < $IPTABLES -A tcp_packets -p TCP -s 0/0 --dport 1503 -j allowed < $IPTABLES -A tcp_packets -p TCP -s 0/0 --dport 3389 -j allowed < $IPTABLES -A tcp_packets -p TCP -s 0/0 --dport 5001:65535 -j allowed --- > $IPTABLES -A tcp_packets -p TCP -s 0/0 --dport 1500:65535 -j allowed 192,200c192,200 < $IPTABLES -A tcp_packets -p TCP -s 0/0 --source-port 22 -j ACCEPT < $IPTABLES -A tcp_packets -p TCP -s 0/0 --source-port 25 -j ACCEPT < $IPTABLES -A tcp_packets -p TCP -s 0/0 --source-port 42 -j ACCEPT < $IPTABLES -A tcp_packets -p TCP -s 0/0 --source-port 80 -j ACCEPT < $IPTABLES -A tcp_packets -p TCP -s 0/0 --source-port 113 -j ACCEPT < $IPTABLES -A tcp_packets -p TCP -s 0/0 --source-port 143 -j ACCEPT < $IPTABLES -A tcp_packets -p TCP -s 0/0 --source-port 174 -j ACCEPT < $IPTABLES -A tcp_packets -p TCP -s 0/0 --source-port 443 -j ACCEPT < $IPTABLES -A tcp_packets -p TCP -s 0/0 --source-port 5001:65535 -j = ACCEPT --- > $IPTABLES -A tcp_packets -p TCP -s 0/0 --sport 22 -j ACCEPT > $IPTABLES -A tcp_packets -p TCP -s 0/0 --sport 25 -j ACCEPT > $IPTABLES -A tcp_packets -p TCP -s 0/0 --sport 42 -j ACCEPT > $IPTABLES -A tcp_packets -p TCP -s 0/0 --sport 80 -j ACCEPT > $IPTABLES -A tcp_packets -p TCP -s 0/0 --sport 113 -j ACCEPT > $IPTABLES -A tcp_packets -p TCP -s 0/0 --sport 143 -j ACCEPT > $IPTABLES -A tcp_packets -p TCP -s 0/0 --sport 174 -j ACCEPT > $IPTABLES -A tcp_packets -p TCP -s 0/0 --sport 443 -j ACCEPT > $IPTABLES -A tcp_packets -p TCP -s 0/0 --sport 1500:65535 -j ACCEPT 262d261 < 268d266 < ------=_NextPart_000_0009_01C2CE17.624F9EB0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Diff between File I ( iptablesRC ) and = File II=20 (iptablesRC.2). File I works for incoming mail. File II does not for = incoming=20 mail, neither does pinging to this server to its external interface NIC = IP.=20

I could not figure out what the = difference in these=20 port allowing, reject or accept commands which are keeping the in-coming = mail=20 from coming on a RH Linux 7.3. Please help. Thanks.

----------------------------------------------------------------= --------------

[shossain@mohican shossain]$ diff=20 /home/admin/firewall/iptablesRC /home/admin/firewall/iptablesRC.2 = | =20 more
162c162
< $IPTABLES -A allowed -p TCP -j = REJECT
---
>=20 $IPTABLES -A allowed -p TCP -j DROP
185,187c185,187
< $IPTABLES = -A=20 tcp_packets -p TCP -s 0/0 --dport 1503 -j allowed
< $IPTABLES -A=20 tcp_packets -p TCP -s 0/0 --dport 3389 -j allowed
< $IPTABLES -A=20 tcp_packets -p TCP -s 0/0 --dport 5001:65535 -j allowed
---
> = $IPTABLES=20 -A tcp_packets -p TCP -s 0/0 --dport 1500:65535 -j=20 allowed
192,200c192,200
< $IPTABLES -A tcp_packets -p TCP -s = 0/0=20 --source-port 22 -j ACCEPT
< $IPTABLES -A tcp_packets -p TCP -s = 0/0=20 --source-port 25 -j ACCEPT
< $IPTABLES -A tcp_packets -p TCP -s = 0/0=20 --source-port 42 -j ACCEPT
< $IPTABLES -A tcp_packets -p TCP -s = 0/0=20 --source-port 80 -j ACCEPT
< $IPTABLES -A tcp_packets -p TCP -s = 0/0=20 --source-port 113 -j ACCEPT
< $IPTABLES -A tcp_packets -p TCP -s = 0/0=20 --source-port 143 -j ACCEPT
< $IPTABLES -A tcp_packets -p TCP -s = 0/0=20 --source-port 174 -j ACCEPT
< $IPTABLES -A tcp_packets -p TCP -s = 0/0=20 --source-port 443 -j ACCEPT
< $IPTABLES -A tcp_packets -p TCP -s = 0/0=20 --source-port 5001:65535 -j ACCEPT
---
> $IPTABLES -A = tcp_packets -p=20 TCP -s 0/0 --sport 22 -j ACCEPT
> $IPTABLES -A tcp_packets -p TCP = -s 0/0=20 --sport 25 -j ACCEPT
> $IPTABLES -A tcp_packets -p TCP -s 0/0 = --sport 42=20 -j ACCEPT
> $IPTABLES -A tcp_packets -p TCP -s 0/0 --sport 80 -j=20 ACCEPT
> $IPTABLES -A tcp_packets -p TCP -s 0/0 --sport 113 -j=20 ACCEPT
> $IPTABLES -A tcp_packets -p TCP -s 0/0 --sport 143 -j=20 ACCEPT
> $IPTABLES -A tcp_packets -p TCP -s 0/0 --sport 174 -j=20 ACCEPT
> $IPTABLES -A tcp_packets -p TCP -s 0/0 --sport 443 -j=20 ACCEPT
> $IPTABLES -A tcp_packets -p TCP -s 0/0 --sport 1500:65535 = -j=20 ACCEPT
262d261
<
268d266
<

------=_NextPart_000_0009_01C2CE17.624F9EB0-- _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/