Linux Netfilter discussions
 help / color / mirror / Atom feed
From: "Roland Häder" <r.haeder@web.de>
To: netfilter@vger.kernel.org
Subject: Bastille/netfilter with Linux 2.6.28 blocks connections
Date: Sat, 03 Jan 2009 22:02:53 +0100	[thread overview]
Message-ID: <662506031@web.de> (raw)

Hi together,

I have a Debian Unstable (Sid) here with vanilla kernel 2.6.28. I use the Bastille firewall script to setup firewall rules.

When I now start a service e.g. Tor which needs open ports at 9001 and 9030 it can connect to itself when the firewall is done.

But when I start it it's self-connections got blocked.

Here is my ruleset exported with "iptables-save > iptables.list":
http://www.mxchange.org/downloads/firebox/iptables.list

The rule with log-prefix "INPUT DROP 10" blocks Tor's own connection attempt.

Additonally no masq is working.

My router has IP 192.168.1.1 on internal NIC and 192.168.20.1 on external NIC where the ADSL box is connected.

If you need kernel config or output of "route -n" I can upload it on my server as well.

Please assisst me here. :)

Regards,
Roland
_______________________________________________________________________
Sensationsangebot verlängert: WEB.DE FreeDSL - Telefonanschluss + DSL
für nur 16,37 Euro/mtl.!* http://dsl.web.de/?ac=OM.AD.AD008K15039B7069a


             reply	other threads:[~2009-01-03 21:02 UTC|newest]

Thread overview: 17+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2009-01-03 21:02 Roland Häder [this message]
2009-01-05 11:47 ` Bastille/netfilter with Linux 2.6.28 blocks connections Michele Petrazzo - Unipex srl
  -- strict thread matches above, loose matches on Subject: below --
2009-01-05 13:41 Roland Häder
2009-01-05 14:37 ` Michele Petrazzo - Unipex srl
2009-01-07 15:16 ` Mart Frauenlob
2009-01-05 16:37 Roland Häder
2009-01-07  8:51 ` Michele Petrazzo - Unipex srl
2009-01-05 16:52 Roland Häder
2009-01-07 15:45 Roland Häder
2009-01-07 19:43 ` Mart Frauenlob
2009-01-07 20:04 Roland Häder
2009-01-07 20:15 ` Mart Frauenlob
2009-01-07 21:04 Roland Häder
2009-01-07 21:09 Roland Häder
2009-01-07 21:55 Roland Häder
2009-01-07 22:16 ` Mart Frauenlob
2009-01-07  1:16   ` Roland Haeder

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=662506031@web.de \
    --to=r.haeder@web.de \
    --cc=netfilter@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox