Ole J wrote:
This server has official static ip
This is my iptables:
# Firewall configuration written by system-config-securitylevel
# Manual customization of this file is not recommended.
*filter
:FORWARD ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:RH-Firewall-1-INPUT - [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -j RH-Firewall-1-INPUT
-A FORWARD -j RH-Firewall-1-INPUT
-A RH-Firewall-1-INPUT -i lo -j ACCEPT
-A RH-Firewall-1-INPUT -p icmp --icmp-type any -j ACCEPT
-A RH-Firewall-1-INPUT -p 50 -j ACCEPT
-A RH-Firewall-1-INPUT -p 51 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -d 224.0.0.251 --dport 5353 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m udp --dport 631 -j DROP
-A RH-Firewall-1-INPUT -p tcp -m tcp --dport 631 -j DROP
-A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
# ftp
-A RH-Firewall-1-INPUT -p tcp -m tcp -m state --dport 21 --state NEW -j
ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m tcp -m state --dport 25 --state NEW -j
ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m state -m tcp --dport 22 --state NEW -j
ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m state -m tcp --dport 443 --state NEW -j
ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m state -m tcp --dport 80 --state NEW -j
ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m state -m tcp --dport 10000 --state NEW
-j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m state -m tcp --dport 20000 --state NEW
-j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m state -m tcp --dport 587 --state NEW -j
ACCEPT
-A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited
# imap
-A RH-Firewall-1-INPUT -p tcp -m tcp -m state --dport 143 --state NEW -j
ACCEPT
# imapssl
-A RH-Firewall-1-INPUT -p tcp -m tcp -m state --dport 993 --state NEW -j
ACCEPT
# ftp
-A RH-Firewall-1-INPUT -p tcp -m tcp -m state --dport 21 --state NEW -j
ACCEPT
COMMIT
# Generated by webmin
*mangle
:FORWARD ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:PREROUTING ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
COMMIT
# Completed
# Generated by webmin
*nat
:OUTPUT ACCEPT [0:0]
:PREROUTING ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
COMMIT
# Completed
Eric "Shubes" wrote:
[EMAIL PROTECTED] wrote:
Hello,
It seems i have trouble getting my email programs to connect when i have
the linux firewall on, centos 5 builtin firewall.
connection time out on whatever i try. pop3,imap,smtp, submission, ssl
Clues? I have checked the iptables and it should be ok, still not
( yeah i have run firewall.sh :P )
B/R
Ole J
Is your toaster on a private IP address behind a firewall? If so, you'll
need to modify your toaster firewall.sh to allow traffic from your
local subnet.
Example (includes existing lines for reference):
## Drop all incoming fragments
iptables -A INPUT -i eth0 -f -j DROP
#
# shubes 5/16/06 - accept packets from local net
iptables -A INPUT -s 192.168.nnn.0/255.255.255.0 -j ACCEPT
#
## Drop outside packets with local addresses - anti-spoofing measure
You have your imap rules after your reject rule. That would explain
imap not working. I don't know about the rest.
W
---------------------------------------------------------------------
QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
