Re: iptables and nmap

[Gian Piero Carrubba <gp-ml@rm-rf.it>]

Il giorno Thu, 7 Jun 2007 15:51:51 +0200
"Joan Hérisson" <herisson@epigenomique.genopole.fr> ha scritto:

> 		So I added this rule :
> 			"iptables -A tcp_packets -p TCP -i eth1 -s
> 0/0         --dport 8080  -j allowed"
> 		where eth1 is the way toward my local network
> 
> 	Results:
> 		- The server is still unreachable.
> 		- When I do nmap localhost, I have port 80 open but
> not 8080.
> 		- When I comment out the line for port 80 in
> firewall-start and I restart firewall, I do nmap localhost, port 80
> is still open.

Just a further note: you've opened ( or tried to, don't know if the
action was successful ) the port on interface eth1, but you're testing
the rule on localhost ( loopback interface lo ).

Ciao,
Gian Piero.