nixCraft Linux Forum

nixCraft

Linux Tech Support Forum

Iptables problem

This is a discussion on Iptables problem within the Linux software forums, part of the Linux Getting Started category; Hi Here i am sending you my IPTABLES Configuration details . Now i have allowed https ( 8443 ) port ...


Go Back   nixCraft Linux Forum > Linux Getting Started > Linux software

Register FAQ Members List Calendar Mark Forums Read
  #1 (permalink)  
Old 03-19-2008, 06:08 PM
Junior Member
User
 
Join Date: Jun 2007
My distro: Debian
Posts: 15
Rep Power: 0
jhn_daz@yahoo.com is on a distinguished road
Unhappy Iptables problem

Hi

Here i am sending you my IPTABLES Configuration details . Now i have allowed https ( 8443 ) port and mysql (3306) port ,in both the direction . Now the thing is my server is allow me to access HTTPS request but the thing is it blocks some components in https web sites ...so how can i trace it ..

If i stop iptables service it allows me to open complete web page so how can i trace this ...

Here my Iptables rules....

[root@xx /]# iptables --list
Chain INPUT (policy ACCEPT)
target prot opt source destination

ACCEPT icmp -- 10.10.10.10 60.60.60.60
ACCEPT icmp -- 10.10.10.10 60.60.60.61
ACCEPT icmp -- 10.10.10.10 60.60.60.62
ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
ACCEPT tcp -- anywhere anywhere tcp dpt:smtp
ACCEPT tcp -- anywhere anywhere tcp dptop3
ACCEPT tcp -- anywhere anywhere tcp dpt:http
ACCEPT tcp -- anywhere anywhere tcp dpt:ftp
ACCEPT tcp -- anywhere anywhere tcp dpt:domain
ACCEPT tcp -- anywhere anywhere tcp dpt:tftp
ACCEPT tcp -- anywhere anywhere tcp dpt:webcache
ACCEPT tcp -- anywhere anywhere tcp dpt:hosts2-ns
ACCEPT tcp -- anywhere anywhere tcp dpt:sftp
ACCEPT tcp -- anywhere anywhere tcp dpt:https
ACCEPT tcp -- anywhere anywhere tcp dpt:ftps-data
ACCEPT tcp -- anywhere anywhere tcp dpt:ftps
ACCEPT tcp -- anywhere anywhere tcp dpt:imaps
ACCEPT tcp -- anywhere anywhere tcp dpt op3s
ACCEPT tcp -- anywhere anywhere tcp dpt:imap
ACCEPT tcp -- anywhere anywhere tcp dptcsync-https
ACCEPT udp -- anywhere anywhere udp dpt csync-https
ACCEPT tcp -- anywhere anywhere tcp dpt:mysql
DROP all -- anywhere anywhere

Chain FORWARD (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination
ACCEPT icmp -- 61.17.214.230 72.47.221.40
ACCEPT icmp -- 61.17.213.238 72.47.221.40
ACCEPT icmp -- 74.208.44.205 72.47.221.40
ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
ACCEPT tcp -- anywhere anywhere tcp dpt:smtp
ACCEPT tcp -- anywhere anywhere tcp dptop3
ACCEPT tcp -- anywhere anywhere tcp dpt:http
ACCEPT tcp -- anywhere anywhere tcp dpt:ftp
ACCEPT tcp -- anywhere anywhere tcp dpt:domain
ACCEPT tcp -- anywhere anywhere tcp dpt:tftp
ACCEPT tcp -- anywhere anywhere tcp dpt:webcache
ACCEPT tcp -- anywhere anywhere tcp dpt:hosts2-ns
ACCEPT tcp -- anywhere anywhere tcp dpt:sftp
ACCEPT tcp -- anywhere anywhere tcp dpt:https
ACCEPT tcp -- anywhere anywhere tcp dpt:ftps-data
ACCEPT tcp -- anywhere anywhere tcp dpt:ftps
ACCEPT tcp -- anywhere anywhere tcp dpt:imaps
ACCEPT tcp -- anywhere anywhere tcp dptop3s
ACCEPT tcp -- anywhere anywhere tcp dpt:imap
ACCEPT tcp -- anywhere anywhere tcp dptcsync-https
ACCEPT udp -- anywhere anywhere udp dptcsync-https
ACCEPT tcp -- anywhere anywhere tcp dpt:mysql
[root@xx /]#
[root@xx /]#


Please help ...

john
Reply With Quote
Sponsored Links
  #2 (permalink)  
Old 03-24-2008, 06:59 PM
Member
User
 
Join Date: Mar 2008
My distro: Debian, Slackware, LFS
Posts: 83
Rep Power: 1
Tux-Idiot is on a distinguished road
Talking

Quote:
Originally Posted by jhn_daz@yahoo.com View Post
Hi

Here i am sending you my IPTABLES Configuration details . Now i have allowed https ( 8443 ) port and mysql (3306) port ,in both the direction .
.... snip....
DROP all -- anywhere anywhere

<DROP all -- anywhere anywhere> IMHO this is the culprit rule. like you are allowing all other traffic, everything, anything and everything, and you are also dropping everything? stumped

Chain FORWARD (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination
....snip....
ACCEPT tcp -- anywhere anywhere tcp dpt:mysql
[root@xx /]#
[root@xx /]#


Please help ...

john
did you masquerade or nat the traffic anywhere? check the NAT/masquerade rules. man iptables else refer the iptables website ipcontrac?
Reply With Quote
Reply

Bookmarks


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On

Similar Threads

Thread Thread Starter Forum Replies Last Post
Iptables nixsen CentOS / RHEL / Fedora 2 11-29-2007 03:01 PM
iptables help vitaminme Networking, Firewalls and Security 1 09-04-2007 02:42 AM
IPTABLES Help asim.mcp Linux software 3 07-08-2006 02:53 AM
IPTABLES help vasanth Linux software 1 03-09-2005 09:15 AM


All times are GMT +5.5. The time now is 12:13 AM.


Powered by vBulletin® Version 3.7.2 - Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Search Engine Optimization by vBSEO 3.2.0

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36