nixCraft

hi nix i want webmin firewall configuration for cloud karmic server... i tried but its blocking ssh after sometime... i dont know how to giv priority to every rules...kindly help on this.... thanks...

Can you post your firewall configuration or rules?

__________________
Rocky Jr.
What's wrong? I hope I am not making you uncomfortable...

Never send a boy to do a mans job.

this s my /etc/iptables.rules


*mangle
:PREROUTING ACCEPT [590:57769]
:INPUT ACCEPT [590:57769]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [454:239158]
:POSTROUTING ACCEPT [454:239158]
COMMIT
# Completed on Thu Mar 18 18:05:48 2010
# Generated by iptables-save v1.4.4 on Thu Mar 18 18:05:48 2010
*nat
:PREROUTING ACCEPT [16:960]
:POSTROUTING ACCEPT [1:76]
:OUTPUT ACCEPT [1:76]
COMMIT
# Completed on Thu Mar 18 18:05:48 2010
# Generated by iptables-save v1.4.4 on Thu Mar 18 18:05:48 2010
*filter
:INPUT DROP [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [1213:1188899]
-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 443 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 389 -j ACCEPT
-A INPUT -i eth2 -j ACCEPT
-A INPUT -p tcp -m tcp -m multiport --dports 21,110,139,143,445,993,995 -j ACCEPT
-A INPUT -p tcp -m tcp --tcp-flags ACK ACK -j ACCEPT
-A INPUT -m state --state ESTABLISHED -j ACCEPT
-A INPUT -m state --state RELATED -j ACCEPT
-A INPUT -p udp -m udp --sport 53 --dport 1024:65535 -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 0 -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 3 -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 4 -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 11 -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 12 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 113 -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 2049:2050 -j DROP
-A INPUT -p tcp -m tcp --dport 6000:6063 -j DROP
-A INPUT -p tcp -m tcp --dport 7000:7010 -j DROP
-A INPUT -p tcp -m tcp --dport 1024:65535 -j ACCEPT
COMMIT

tis s my /etc/iptables.up.rules

*nat
:PREROUTING ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
COMMIT
# Completed on Thu Mar 18 11:18:45 2010
# Generated by iptables-save v1.4.4 on Thu Mar 18 11:18:45 2010
*mangle
:PREROUTING ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
COMMIT
# Completed on Thu Mar 18 11:18:45 2010
# Generated by iptables-save v1.4.4 on Thu Mar 18 11:18:45 2010
*filter
:FORWARD ACCEPT [0:0]
:INPUT DROP [0:0]
:OUTPUT ACCEPT [0:0]
COMMIT

wat exactly happening is .. now am not able to change,flush,revert back...
if am doin these things my ssh connection and every connectivity itself hanging .. once i restarted am coming to normal that is same situation...
tis s on virtual cloud... using webmin...