/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */
> I have been using ipchains for a month, only this
> morning none of the user could send email. I get the
> following error in my log:
>
> Feb 24 02:45:23 linux kernel: Packet log: input DENY
> ppp0 PROTO=6 205.180.183.3:1202 209.69.204.143:113 L=60
> S=0x00 I=90 F=0x4000 T=48
[snip]
> # Whack unwanted visitors
> /sbin/ipchains -P input ACCEPT
> /sbin/ipchains -A input -l -i ppp0 -p tcp --dport 31780:31790 -j DENY
> /sbin/ipchains -A input -l -i ppp0 -p udp --dport 31780:31790 -j DENY
> /sbin/ipchains -A input -l -i ppp0 -p tcp --dport 21:1024 -j DENY
^^^^^^^
here you deny them so the immediately following tcp rule for 113 is never
reached. Is this a new addition?
> /sbin/ipchains -A input -l -i ppp0 -p tcp --dport 113 -j ACCEPT
> /sbin/ipchains -A input -l -i ppp0 -p udp --dport 113 -j ACCEPT
move these two lines above where the line where this port is set to deny.
Lourdes
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS INCLUDES
UNSUBSCRIBING!
or email to [EMAIL PROTECTED]
PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.