Re: [Mldonkey-users] Help - cannot get MLdonkey on redhat server towork - continued

[Scott Lewis]

ok - output of iptables -nvL:-


    0     0 ACCEPT     tcp  --  lo     *       0.0.0.0/0
0.0.0.0/0          tcp dpt:4080
    0     0 ACCEPT     udp  --  lo     *       0.0.0.0/0
0.0.0.0/0          udp dpt:4080
    0     0 ACCEPT     tcp  --  eth1   *       0.0.0.0/0
0.0.0.0/0          tcp dpt:4080
    0     0 ACCEPT     udp  --  eth1   *       0.0.0.0/0
0.0.0.0/0          udp dpt:4080
    0     0 REJECT     tcp  --  eth0   *       0.0.0.0/0
0.0.0.0/0          tcp dpt:4080 reje
ct-with icmp-port-unreachable
    0     0 REJECT     udp  --  eth0   *       0.0.0.0/0
0.0.0.0/0          udp dpt:4080 reje
ct-with icmp-port-unreachable


I have taken the other stuff out

ioutput of iptables -t nat -nvL


hain PREROUTING (policy ACCEPT 9516 packets, 572K bytes)
 pkts bytes target     prot opt in     out     source
destination
    0     0 DROP       all  --  eth0   *       192.168.0.0/16
0.0.0.0/0
    0     0 DROP       all  --  eth0   *       10.0.0.0/8
0.0.0.0/0
    0     0 DROP       all  --  eth0   *       172.16.0.0/12
0.0.0.0/0

Chain POSTROUTING (policy ACCEPT 727 packets, 114K bytes)
 pkts bytes target     prot opt in     out     source
destination
 2155  111K MASQUERADE  all  --  *      eth0    0.0.0.0/0
0.0.0.0/0

Chain OUTPUT (policy ACCEPT 8108 packets, 567K bytes)
 pkts bytes target     prot opt in     out     source
destination

output of  iptables -t mangle -nvL

Chain PREROUTING (policy ACCEPT 527K packets, 354M bytes)
 pkts bytes target     prot opt in     out     source
destination

Chain INPUT (policy ACCEPT 147K packets, 95M bytes)
 pkts bytes target     prot opt in     out     source
destination

Chain FORWARD (policy ACCEPT 380K packets, 259M bytes)
 pkts bytes target     prot opt in     out     source
destination

Chain OUTPUT (policy ACCEPT 149K packets, 97M bytes)
 pkts bytes target     prot opt in     out     source
destination

Chain POSTROUTING (policy ACCEPT 531K packets, 356M bytes)
 pkts bytes target     prot opt in     out     source
destination

Know I ahve also tried - aftering altering to mys system -  ssh -L
31415:yourServersIpAddress:4080 address@hidden to no
avail - -still a page cannot be displayed screen.

I have just altered my iptables script to, thanks to Wickus Botha ;-

iptables -A INPUT -p tcp -i lo --dport 4080 -j ACCEPT #allow loopback to
connect
iptables -A INPUT -p udp -i lo --dport 4080 -j ACCEPT #allow loopback to
connect
iptables -A INPUT -p tcp -i $INTINT --dport 4080 -j ACCEPT #allow the intint
to connect
iptables -A INPUT -p udp -i $INTINT --dport 4080 -j ACCEPT #allow the intint
to connect
iptables -A INPUT -p tcp -i $EXTINT --dport 4080 -j REJECT #block from the
extint
iptables -A INPUT -p udp -i $EXTINT --dport 4080 -j REJECT #block from the
extint

But still not working


Scott





----- Original Message ----- 
From: "Christian Loitsch" <address@hidden>
To: <address@hidden>
Sent: Saturday, June 14, 2003 12:41 PM
Subject: Re: [Mldonkey-users] Help - cannot get MLdonkey on redhat server
towork - continued


> > Anyway - no web browser etc on the pc that's running mldonkey so I
cannot do
> > a http://127.0.0.1:4080
> if you have ssh, you can do:
> ssh -L 31415:yourServersIpAddress:4080 address@hidden
>
> then point your browser to http://localhost:31415
> this should redirect everything (over an encrypted connection) to your
> server.
>
> > So - could it be the firewall blocking it?
> on a quick look this seems to be correct.
> But it is possible that you DENY port 4080 before these lines.
>
> also the output of:
> iptables -nvL
> iptables -t nat -nvL
> iptables -t mangle -nvL
>
> could be helpful.  (Try to find the rule where the number of "catched"
> packages changes, when you try to access Port 4080.
>
> christian
>
>
>
> _______________________________________________
> Mldonkey-users mailing list
> address@hidden
> http://mail.nongnu.org/mailman/listinfo/mldonkey-users