LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 08-21-2006, 07:07 AM   #1
siepmann
LQ Newbie
 
Registered: Sep 2004
Location: Nottingham, UK
Posts: 28

Rep: Reputation: 15
Strange port accessibility problems


I have a Fedora 5 system with firestarter.

For some reason, despite configuring firestarter to allow such traffic, ports 80 and 25 cannot be accessed from outside the network.

iptables output is below.

Any help really appreciated - I need to get this sorted!

Thanks,

Peter

Code:
[root@isadore ~]# /sbin/iptables -L -n
Chain INPUT (policy DROP)
target     prot opt source               destination         
ACCEPT     tcp  --  80.225.255.50        0.0.0.0/0           tcp flags:!0x17/0x02 
ACCEPT     udp  --  80.225.255.50        0.0.0.0/0           
ACCEPT     tcp  --  80.225.255.58        0.0.0.0/0           tcp flags:!0x17/0x02 
ACCEPT     udp  --  80.225.255.58        0.0.0.0/0           
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0           
ACCEPT     icmp --  0.0.0.0/0            0.0.0.0/0           limit: avg 10/sec burst 5 
DROP       all  --  0.0.0.0/0            255.255.255.255     
DROP       all  --  224.0.0.0/8          0.0.0.0/0           
DROP       all  --  0.0.0.0/0            224.0.0.0/8         
DROP       all  --  255.255.255.255      0.0.0.0/0           
DROP       all  --  0.0.0.0/0            0.0.0.0             
DROP       all  --  0.0.0.0/0            0.0.0.0/0           state INVALID 
LSI        all  -f  0.0.0.0/0            0.0.0.0/0           limit: avg 10/min burst 5 
INBOUND    all  --  0.0.0.0/0            0.0.0.0/0           
INBOUND    all  --  0.0.0.0/0            192.168.1.1         
INBOUND    all  --  0.0.0.0/0            88.107.70.53        
INBOUND    all  --  0.0.0.0/0            192.168.1.255       
LOG_FILTER  all  --  0.0.0.0/0            0.0.0.0/0           
LOG        all  --  0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Unknown Input' 

Chain FORWARD (policy DROP)
target     prot opt source               destination         
ACCEPT     icmp --  0.0.0.0/0            0.0.0.0/0           limit: avg 10/sec burst 5 
TCPMSS     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp flags:0x06/0x02 TCPMSS clamp to PMTU 
OUTBOUND   all  --  0.0.0.0/0            0.0.0.0/0           
ACCEPT     tcp  --  0.0.0.0/0            192.168.1.0/24      state RELATED,ESTABLISHED 
ACCEPT     udp  --  0.0.0.0/0            192.168.1.0/24      state RELATED,ESTABLISHED 
LOG_FILTER  all  --  0.0.0.0/0            0.0.0.0/0           
LOG        all  --  0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Unknown Forward' 

Chain OUTPUT (policy DROP)
target     prot opt source               destination         
ACCEPT     tcp  --  88.107.70.53         80.225.255.50       tcp dpt:53 
ACCEPT     udp  --  88.107.70.53         80.225.255.50       udp dpt:53 
ACCEPT     tcp  --  88.107.70.53         80.225.255.58       tcp dpt:53 
ACCEPT     udp  --  88.107.70.53         80.225.255.58       udp dpt:53 
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0           
DROP       all  --  224.0.0.0/8          0.0.0.0/0           
DROP       all  --  0.0.0.0/0            224.0.0.0/8         
DROP       all  --  255.255.255.255      0.0.0.0/0           
DROP       all  --  0.0.0.0/0            0.0.0.0             
DROP       all  --  0.0.0.0/0            0.0.0.0/0           state INVALID 
OUTBOUND   all  --  0.0.0.0/0            0.0.0.0/0           
OUTBOUND   all  --  0.0.0.0/0            0.0.0.0/0           
LOG_FILTER  all  --  0.0.0.0/0            0.0.0.0/0           
LOG        all  --  0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Unknown Output' 

Chain INBOUND (4 references)
target     prot opt source               destination         
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpts:20:21 
ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0           udp dpts:20:21 
ACCEPT     tcp  --  192.168.1.0/24       0.0.0.0/0           tcp dpt:53 
ACCEPT     udp  --  192.168.1.0/24       0.0.0.0/0           udp dpt:53 
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:143 
ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0           udp dpt:143 
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:22 
ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0           udp dpt:22 
ACCEPT     tcp  --  192.168.1.0/24       0.0.0.0/0           tcp dpt:5900 
ACCEPT     udp  --  192.168.1.0/24       0.0.0.0/0           udp dpt:5900 
ACCEPT     tcp  --  192.168.1.0/24       0.0.0.0/0           tcp dpt:5901 
ACCEPT     udp  --  192.168.1.0/24       0.0.0.0/0           udp dpt:5901 
ACCEPT     tcp  --  192.168.1.0/24       0.0.0.0/0           tcp dpt:3306 
ACCEPT     udp  --  192.168.1.0/24       0.0.0.0/0           udp dpt:3306 
ACCEPT     tcp  --  192.168.1.0/24       0.0.0.0/0           tcp dpts:137:139 
ACCEPT     udp  --  192.168.1.0/24       0.0.0.0/0           udp dpts:137:139 
ACCEPT     tcp  --  192.168.1.0/24       0.0.0.0/0           tcp dpt:445 
ACCEPT     udp  --  192.168.1.0/24       0.0.0.0/0           udp dpt:445 
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:25 
ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0           udp dpt:25 
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:80 
ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0           udp dpt:80 
LSI        all  --  0.0.0.0/0            0.0.0.0/0           

Chain LOG_FILTER (5 references)
target     prot opt source               destination         

Chain LSI (2 references)
target     prot opt source               destination         
LOG_FILTER  all  --  0.0.0.0/0            0.0.0.0/0           
LOG        tcp  --  0.0.0.0/0            0.0.0.0/0           tcp flags:0x17/0x02 limit: avg 1/sec burst 5 LOG flags 0 level 6 prefix `Inbound ' 
DROP       tcp  --  0.0.0.0/0            0.0.0.0/0           tcp flags:0x17/0x02 
LOG        tcp  --  0.0.0.0/0            0.0.0.0/0           tcp flags:0x17/0x04 limit: avg 1/sec burst 5 LOG flags 0 level 6 prefix `Inbound ' 
DROP       tcp  --  0.0.0.0/0            0.0.0.0/0           tcp flags:0x17/0x04 
LOG        icmp --  0.0.0.0/0            0.0.0.0/0           icmp type 8 limit: avg 1/sec burst 5 LOG flags 0 level 6 prefix `Inbound ' 
DROP       icmp --  0.0.0.0/0            0.0.0.0/0           icmp type 8 
LOG        all  --  0.0.0.0/0            0.0.0.0/0           limit: avg 5/sec burst 5 LOG flags 0 level 6 prefix `Inbound ' 
DROP       all  --  0.0.0.0/0            0.0.0.0/0           

Chain LSO (0 references)
target     prot opt source               destination         
LOG_FILTER  all  --  0.0.0.0/0            0.0.0.0/0           
LOG        all  --  0.0.0.0/0            0.0.0.0/0           limit: avg 5/sec burst 5 LOG flags 0 level 6 prefix `Outbound ' 
REJECT     all  --  0.0.0.0/0            0.0.0.0/0           reject-with icmp-port-unreachable 

Chain OUTBOUND (3 references)
target     prot opt source               destination         
ACCEPT     icmp --  0.0.0.0/0            0.0.0.0/0           
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0

Last edited by siepmann; 08-21-2006 at 08:52 AM.
 
Old 08-23-2006, 09:06 PM   #2
MensaWater
LQ Guru
 
Registered: May 2005
Location: Atlanta Georgia USA
Distribution: Redhat (RHEL), CentOS, Fedora, CoreOS, Debian, FreeBSD, HP-UX, Solaris, SCO
Posts: 7,831
Blog Entries: 15

Rep: Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669Reputation: 1669
Do they work if you turn off iptables? If so then you know it is an issue in the iptables setup. If not then it may be your ISP or your company is blocking these ports.

service iptables stop
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
strange serial port problem..can you help? djsroknrol Linux - Software 6 06-28-2006 04:28 PM
Strange port scan results sbogus Linux - Security 16 06-29-2004 02:25 AM
SAMBA accessibility dominant Linux - Networking 4 04-22-2004 03:31 AM
strange service running ... open port shadow.blue Slackware 12 04-16-2004 05:42 PM
Strange port opened ivanatora Linux - Security 4 11-11-2003 10:57 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 09:32 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration