lkml.org 
[lkml]   [1996]   [Oct]   [24]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRe: firewall problem
Date
Hi!

> > /sbin/ipfwadm -O -a reject -W ppp0 -P tcp -S 157.27.10.0/24 \
> > -D 0.0.0.0/0 21 23 \
> > 70 80 194 1000:65535
> > /sbin/ipfwadm -O -a reject -W ppp0 -P tcp -S 157.27.10.0/24 \
> > -D 0.0.0.0/0 21 23 \
> > 70 80 194 1000:65535
>
> This is your problem ----------------------------------------^^^^^^^^^^
> What this does is say that all packets originating on the 157.27.10.0/24
> network will be blocked if their source ports are 21, 23, 70, 80, 194 and
> 1000 through 65535. What happens when someone telnets from the outside to
> the inside? Your inside machine hears a telnet request, and when it goes
> to reply (to complete the three-way TCP handshake and establish a
> dialogue), it's reply packet gets blocked. The packet is blocked because
> you've blocked all ports between 1000 and 65535, inclusive. These are the
> ports that most of your replies will originate from.

What ports should I enable to get the things work ?

> (just out of curiosity, how come you have the rule listed twice?)

I mistake! I should write 'udp', not 'tcp' (or maybe 'all').

\
 
 \ /
  Last update: 2005-03-22 13:38    [W:0.034 / U:0.316 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site