From: "Rob Sterenborg" <rob@sterenborg.info>
To: netfilter@lists.netfilter.org
Subject: RE: not able to ssh from the firewall
Date: Mon, 11 Sep 2006 10:29:30 +0200 (CEST) [thread overview]
Message-ID: <60586.193.173.147.3.1157963370.squirrel@webmail.sterenborg.info> (raw)
In-Reply-To: <1157854906.4748.4.camel@nirvana.aurokruti.in>
On Sun, September 10, 2006 04:21, varun wrote:
> Yes I did all that you suggested.
> I think OUTPUT should allow tcp and udp out ? What do you think ?
It should allow out what you need, but most people leave it's policy to ACCEPT
without any rules because it's easier.
AFAICS, when you have the appropriate state rules in the INPUT and OUTPUT
chain, having an ACCEPT rule for tcp dport 22 should allow you to setup a ssh
connection to a remote server. Having ACCEPT rules for tcp/udp dport 53 should
enable you to do DNS lookups.
Again, if that doesn't work, insert a logging rule to the end (before the
DROP) of the chain to see *what* get's dropped (and post it here).
Gr,
Rob
prev parent reply other threads:[~2006-09-11 8:29 UTC|newest]
Thread overview: 9+ messages / expand[flat|nested] mbox.gz Atom feed top
2006-09-06 2:14 not able to ssh from the firewall varun
2006-09-06 5:31 ` Rob Sterenborg
2006-09-07 14:01 ` varun
2006-09-07 20:57 ` Rob Sterenborg
2006-09-08 2:22 ` varun
2006-09-08 5:29 ` Rob Sterenborg
2006-09-19 13:38 ` varun
2006-09-12 19:48 ` connrate and Linux 2.6.14 and 2.6.16 Pablo Sanchez
[not found] ` <1157854906.4748.4.camel@nirvana.aurokruti.in>
2006-09-11 8:29 ` Rob Sterenborg [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=60586.193.173.147.3.1157963370.squirrel@webmail.sterenborg.info \
--to=rob@sterenborg.info \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox