From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from nsfone.fone.net ([206.168.68.96]) by speech.braille.uwo.ca with esmtp (Exim 3.36 #1 (Debian)) id 1HWfDj-00057z-00 for ; Wed, 28 Mar 2007 16:58:15 -0400 Received: from mail2.fone.net (mail2.fone.net [206.168.68.165]) by nsfone.fone.net (8.13.8+Sun/8.13.7) with ESMTP id l2SKoORo028907 for ; Wed, 28 Mar 2007 14:50:25 -0600 (MDT) Received: from blanchew2fs98i (ip-206-123-194-16.static.fasttrackcomm.net [206.123.194.16]) by mail2.fone.net (8.13.6+Sun/8.12.10) with SMTP id l2SKrLbl020012 for ; Wed, 28 Mar 2007 14:53:22 -0600 (MDT) Message-ID: <007301c7717b$c1557db0$6701a8c0@blanchew2fs98i> From: "Littlefield, Tyler" To: "Speakup is a screen review system for Linux." References: <00bc01c76f2e$1156d2f0$6701a8c0@blanchew2fs98i><20070327184057.GA25407@sunset.net><007501c770ac$ca0c5480$6701a8c0@blanchew2fs98i> <20070328160602.GA17397@sunset.net> Subject: Re: iptables? Date: Wed, 28 Mar 2007 13:57:52 -0700 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1158 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 X-BeenThere: speakup@braille.uwo.ca X-Mailman-Version: 2.1.9 Precedence: list Reply-To: "Speakup is a screen review system for Linux." List-Id: "Speakup is a screen review system for Linux." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Mar 2007 20:58:15 -0000 Will do, thanks. ----- Original Message ----- From: "Ralph W. Reid" To: "Speakup is a screen review system for Linux." Sent: Wednesday, March 28, 2007 9:06 AM Subject: Re: iptables? > You might want to try logging some of iptables' activities to > determine what exactly is being blocked. If the lines you listed are > in a script, you can insert the following line just before the 'INPUT > DROP' line to log the incoming packets at that point to see what is > reaching that point in your iptables rules: > > iptables -a INPUT -j LOG --log-prefix " input drop " > > The resulting log entries will be in /var/syslog ('grep "input drop" > /var/syslog' will display the results). You may want to comment out > or remove this new line from your script when you are done using it, > and then use the iptables delete option or rerun the script to clear > the tables--this iptables command may produce a lot of log entries > very quickly. > > HTH, and have a great day. > > On Tue, Mar 27, 2007 at 01:16:15PM -0700, Littlefield, Tyler wrote: > > I'm trying to use apt-get, I'm not sure what I would need to enable to get > > that. > > ----- Original Message ----- > > From: "Ralph W. Reid" > > To: "Speakup is a screen review system for Linux." > > Sent: Tuesday, March 27, 2007 11:40 AM > > Subject: Re: iptables? > > > > > > > You have only allowed tcp protocol on various ports. Could you > > > perhaps be doing something which involves other protocols such as udp > > > or icmp? > > > > > > On Sun, Mar 25, 2007 at 03:36:43PM -0700, Littlefield, Tyler wrote: > > > > Hello list, > > > > I've got the following iptables set. > > > > iptables -F > > > > iptables -A INPUT -p tcp --sport 20:22 -j ACCEPT > > > > iptables -A INPUT -p tcp --sport 80 -j ACCEPT > > > > iptables -A INPUT -p tcp --sport 110 -j ACCEPT > > > > iptables -A INPUT -p tcp --sport 3784 -j ACCEPT > > > > iptables -A INPUT -p tcp --sport 443 -j ACCEPT > > > > iptables -A INPUT -p tcp --sport 6666:6670 -j ACCEPT > > > > iptables -A INPUT -p tcp --sport 10000 -j ACCEPT > > > > iptables -A INPUT -p tcp --sport 20000 -j ACCEPT > > > > iptables -P INPUT DROP > > > > iptables -P OUTPUT ACCEPT > > > > I'm dmzed, and when I run this, it puts everything to filter. > > > > Any idea what I'm doing wrong? > > > > Thanks, > > > > ~~TheCreator~~ > > > > _______________________________________________ > > > > Speakup mailing list > > > > Speakup@braille.uwo.ca > > > > http://speech.braille.uwo.ca/mailman/listinfo/speakup > > > > > > -- > > > Ralph. N6BNO. Wisdom comes from central processing, not from I/O. > > > rreid@sunset.net http://personalweb.sunset.net/~rreid > > > ...passing through The City of Internet at the speed of light... > > > 1 = x^0 > > -- > Ralph. N6BNO. Wisdom comes from central processing, not from I/O. > rreid@sunset.net http://personalweb.sunset.net/~rreid > ...passing through The City of Internet at the speed of light... > TAN (x) = SIN (x) / COS (x) > > _______________________________________________ > Speakup mailing list > Speakup@braille.uwo.ca > http://speech.braille.uwo.ca/mailman/listinfo/speakup