diagnosis - was Re: some reality about iptables, please
On Thu, 2003-08-28 at 02:35, Jacob Anawalt wrote:
> Wow, those were some rules. It will take a bit for me to get my head
> around them. Are you looking at a book on ipchains at the same time by
> chance? You have so many similar rules in the input, forward and output
> chains, that it reminds me of my old ipchains rules.
The rules are from Real World Linux Security by Bob Toxen.
>
> I need to know some stuff though.
>
> Email from Linux account or VMWare client works? Try both and let us know.
Email from Debian works. I don't get email via Win98 - I might as well
douse myself in steak sauce and jump in the tiger pit at the zoo.
>
> Browser from Linux account or in VMWare Win98 works? Try both and let us
> know.
IE from Win98 works, Mozilla from Debian doesn't.
With these rules, samba couldn't restore the mapped drive I have from
Win98 to /home/user.
> Also:
> Does ping to www.debian.org work from either/both?
Debian: yes VMware: yes
> Does ftp to ftp.us.debian.org work from either/both?
Debian: yes VMware: yes
> Does imap3 to some imap account (if you have one) work from either/both?
Not a clue. I don't have an imap account.
> Does https to some secure server work from either/both?
Yes from IE in Win98.
No from Debian Mozilla. Here's an example of the messages:
Aug 28 17:35:55 ganesha kernel: DROPl:IN= OUT=eth0 SRC=192.168.2.30
DST=205.156.51.200 LEN=44 TOS=0x00 PREC=0x00 TTL=64 ID=21328 DF
PROTO=TCP SPT=34131 DPT=80 WINDOW=5840 RES=0x00 SYN URGP=0
I'm curious that IN is blank.
Thanks,
Bret
--
bwaldow at alum dot mit dot edu
Reply to: