From: "Eve Atley" <eatley@wowcorp.com>
To: 'Ray Olszewski' <ray@comarre.com>, linux-newbie@vger.kernel.org
Subject: RE: Translating IP tables
Date: Tue, 1 Feb 2005 18:54:15 -0500 [thread overview]
Message-ID: <002e01c508b9$5807df10$1f0aa8c0@lanadmin> (raw)
In-Reply-To: <5.1.0.14.1.20050201085653.02be6918@celine>
Thanks, Ray, for your info so far. Here's what I've discerned...
1. Netstat does show 5901 is running (with much snipped)...
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 0.0.0.0:5801 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:5901 0.0.0.0:* LISTEN
2. I flushed the nasty port 23 away from the iptables, and attempted to add
5901 using the following command:
iptables -A RH-Firewall-1-INPUT -m state --state NEW -p tcp
--destination-port 5901 -j ACCEPT
3. Now 'iptables -nvL' gives me this:
<snip>
Chain RH-Firewall-1-INPUT (2 references)
pkts bytes target prot opt in out source
destination
2964 320K ACCEPT all -- lo * 0.0.0.0/0
0.0.0.0/0
0 0 ACCEPT icmp -- * * 0.0.0.0/0
0.0.0.0/0 icmp type 255
0 0 ACCEPT esp -- * * 0.0.0.0/0
0.0.0.0/0
0 0 ACCEPT ah -- * * 0.0.0.0/0
0.0.0.0/0
44 34271 ACCEPT all -- * * 0.0.0.0/0
0.0.0.0/0 state RELATED,ESTABLISHED
0 0 ACCEPT tcp -- * * 0.0.0.0/0
0.0.0.0/0 state NEW tcp dpt:25
1 48 ACCEPT tcp -- * * 0.0.0.0/0
0.0.0.0/0 state NEW tcp dpt:80
0 0 ACCEPT tcp -- * * 0.0.0.0/0
0.0.0.0/0 state NEW tcp dpt:21
0 0 ACCEPT tcp -- * * 0.0.0.0/0
0.0.0.0/0 state NEW tcp dpt:22
0 0 ACCEPT tcp -- * * 0.0.0.0/0
0.0.0.0/0 state NEW tcp dpt:7886
0 0 ACCEPT tcp -- * * 0.0.0.0/0
0.0.0.0/0 state NEW tcp dpt:8080
0 0 ACCEPT tcp -- * * 0.0.0.0/0
0.0.0.0/0 state NEW tcp dpt:2401
172 29486 REJECT all -- * * 0.0.0.0/0
0.0.0.0/0 reject-with icmp-host-prohibited
0 0 ACCEPT tcp -- * * 0.0.0.0/0
0.0.0.0/0 state NEW tcp dpt:5901
</snip>
4. When I try to telnet to the machine's IP using port 5901, it still
indicates Connection Failed, despite it being set up like everything else
that works.
Final thought: perhaps it makes a difference that it follows the REJECT?
Thanks again,
Eve
-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs
next prev parent reply other threads:[~2005-02-01 23:54 UTC|newest]
Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top
2005-01-19 9:02 Time-Zones Thorsten Alge
2005-01-20 18:33 ` Cannot load mysql extension; don't want to disturb mysql installed Eve Atley
2005-01-20 19:24 ` Eve Atley
2005-01-20 20:26 ` Time-Zones Jeremy Abbott
2005-02-01 16:48 ` Translating IP tables Eve Atley
2005-02-01 17:23 ` Ray Olszewski
2005-02-01 23:54 ` Eve Atley [this message]
2005-02-02 1:30 ` Ray Olszewski
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to='002e01c508b9$5807df10$1f0aa8c0@lanadmin' \
--to=eatley@wowcorp.com \
--cc=linux-newbie@vger.kernel.org \
--cc=ray@comarre.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox