Re: DNAT problem

["Alexis" <alexis@tpys.com.ar>]

to filter some ports is becoming a new "fashion" by the ISP.

The reason is "why he will serve a webserver if i can do this and charge some
fresh money for it"

just that


----- Original Message ----- 
From: "Patrick Leslie Polzer" <leslie.polzer@gmx.net>
To: <netfilter@lists.netfilter.org>
Sent: Saturday, May 29, 2004 1:03 PM
Subject: Re: DNAT problem


> On Sat, 29 May 2004 12:36:37 -0300
> "Alexis" <alexis@tpys.com.ar> wrote:
>
> > i think it could be
> >
> > - that the isp (if you're connecting to one isp trough ppp0) has a filter
for
> > port 80 (it seems strange)
> Hm, possible. I just noticed 81 works, too! What crap is this?
>
> > are you mangling some packets? what is the output for iptables -t mangle -L?
> No rules at all, I generally try to stay away from mangling when testing:
>
>
> ### <snip> ###
>
> stronghold:~# iptables -t mangle -L
> Chain PREROUTING (policy ACCEPT)
> target     prot opt source               destination
>
> Chain INPUT (policy ACCEPT)
> target     prot opt source               destination
>
> Chain FORWARD (policy ACCEPT)
> target     prot opt source               destination
>
> Chain OUTPUT (policy ACCEPT)
> target     prot opt source               destination
>
> Chain POSTROUTING (policy ACCEPT)
> target     prot opt source               destination
>
> ### </snip> ###
>
>
> So I guess all facts are pointing at my crappy ISP...
>
> Leslie
>
>