From: Olivier <olivierk@club-internet.fr>
To: netfilter@lists.netfilter.org
Subject: Re: --match recent
Date: Mon, 11 Jun 2007 20:51:48 +0200 [thread overview]
Message-ID: <20070611185148.GB12937@vvma.net> (raw)
In-Reply-To: <466D9445.5080101@riverviewtech.net>
Heelo Grant,
> What is your FORWARD chain's default policy?
That would be DROP:
Chain FORWARD (policy DROP)
> What does netstat have to say about the connection(s)?
On the targeted ssh server (behind the firewall), while being outside
ssh'ing in, nothing gets there:
tcp6 0 0 *:ssh *:* LISTEN root 5858 2462/sshd
tcp6 0 0 placard:ssh ::ffff:192.168.1.1:3280 ESTABLISHEDroot 82534 13605/sshd: olivier
Of course, if I disable those 2 new rules, everything's fine, just
like it has always been: I sure can connect from the outiside, Port
forwarding and all is up and running.
tcp6 0 0 *:ssh *:* LISTEN root 5858 2462/sshd
tcp6 0 0 placard:ssh -----outside-----:32923 ESTABLISHEDroot 96601 16381/sshd: olivier
tcp6 0 0 placard:ssh ::ffff:192.168.1.1:3280 ESTABLISHEDroot 82534 13605/sshd: olivier
Thanks for your time,
--
Olivier K
prev parent reply other threads:[~2007-06-11 18:51 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2007-06-11 9:23 --match recent olivierk
2007-06-11 14:00 ` Grant Taylor
2007-06-11 18:12 ` Olivier
2007-06-11 18:28 ` Grant Taylor
2007-06-11 18:51 ` Olivier [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20070611185148.GB12937@vvma.net \
--to=olivierk@club-internet.fr \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox