Skip to contentSkip to conversation

Bastille/netfilter with Linux 2.6.28 blocks connections

DISCUSSION Roland Häder 2 participants 2 messages Jan 7, 2009

lore
Share & tools
lore
#0 lore raw
Quoted 8 lines

line 144: -A PUB_IN -s 192.168.1.0/24 -j LOG --log-prefix "PUB_IN DROP 8 "

says: 'PUB_IN DROP 8'

your log says: Jan 5 13:49:12 firebox kernel: INPUT DROP 8

this is not the rule matching in the log. otherwise it would say PUB_IN DROP 8 in your logs.

Okay please redownload this file:
http://www.mxchange.org/downloads/firebox/iptables.list

I have updated it. Output of "iptables -v" said version 1.4.2

Roland
____________________________________________________________________
Psssst! Schon vom neuen WEB.DE MultiMessenger gehört?
Der kann`s mit allen: http://www.produkte.web.de/messenger/?did=3123

#1 lore raw
Quoted 6 lines · Roland Häder
Quoted 6 lines

line 144: -A PUB_IN -s 192.168.1.0/24 -j LOG --log-prefix "PUB_IN DROP 8 "

says: 'PUB_IN DROP 8'

your log says: Jan 5 13:49:12 firebox kernel: INPUT DROP 8

Quoted 9 lines
Quoted 2 lines

this is not the rule matching in the log. otherwise it would say PUB_IN DROP 8 in your logs.

Okay please redownload this file:
http://www.mxchange.org/downloads/firebox/iptables.list

I have updated it. Output of "iptables -v" said version 1.4.2

Roland

ok,

your log says connections come into interface 'ppp0'. those get dropped because there's no allow rule for them. to do it with your configuration, you need two rules like:

-A INPUT -i ppp0 -j PUB_IN
-A OUTPUT -o ppp0 -j PUB_OUT

greets

mart