On 9/9/05, Thaths <[EMAIL PROTECTED]> wrote:
> However, when I am su-ed to www-data, I am unable to connect:
> 
> [EMAIL PROTECTED]:~# su - www-data
> [EMAIL PROTECTED]:~$ telnet localhost 389
> Trying 127.0.0.1...
> telnet: Unable to connect to remote host: Connection refused

Eureka!

[EMAIL PROTECTED]:~# iptables -L -n
Chain INPUT (policy ACCEPT)
target     prot opt source               destination

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
REJECT     tcp  --  0.0.0.0/0            0.0.0.0/0           OWNER UID
match 33 tcp flags:0x16/0x02 reject-with icmp-port-unreachable
REJECT     tcp  --  0.0.0.0/0            0.0.0.0/0           OWNER UID
match 33 tcp flags:0x16/0x02 reject-with icmp-port-unreachable

[EMAIL PROTECTED]:~# grep www-data /etc/passwd
www-data:x:33:33:www-data:/var/www:/bin/sh

Damn Shorewall installed those two REJECT rules.

S.
-- 
"This is everybody's fault but mine!" -- Homer J. Simpson


-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
_______________________________________________
linux-india-help mailing list
linux-india-help@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/linux-india-help

Reply via email to