Re: was: fail2ban for apache2, now iptables help

2019-12-02 Thread Gene Heskett
On Monday 02 December 2019 04:35:26 Andrei POPESCU wrote: > On Du, 01 dec 19, 22:28:43, Gene Heskett wrote: > > It, iptables, did not get restarted on the fresh boot, so obviously > > the systemd manager hasn't been informed to start iptables, > > reloading from /etc/iptables/saved-rules. > > To

Re: iptables help requested

2004-09-05 Thread Craig Jackson
On Sun, 5 Sep 2004 12:21:50 -0700 (PDT) Gururajan Ramachandran <[EMAIL PROTECTED]> wrote: > Hello, > > I think iptables may be blocking SMTP. I cannot figure > out how. Could you tell me if I am correct and how I > can fix it? > > Two NICs: eth0 is the LAN and eth1 is the WAN When asking for he

iptables help requested

2004-09-05 Thread Gururajan Ramachandran
Hello, I think iptables may be blocking SMTP. I cannot figure out how. Could you tell me if I am correct and how I can fix it? Two NICs: eth0 is the LAN and eth1 is the WAN Here are my iptables-save and iptables -L -n outputs: # Generated by iptables-save v1.2.9 on Sun Sep 5 12:43:05 2004 *na

RE: Iptables help ..

2004-09-02 Thread David Bokan
Title: RE: Iptables help .. From: David Bokan Sent: Tuesday, August 31, 2004 1:56 PM To: '[EMAIL PROTECTED]' Subject: RE: Iptables help ..   I think that you'd have to use the FORWARD chain instead of INPUT /sbin/iptables -A FORWARD -p tcp -I eth0 -s 0/0 -d ! 10.0.0.0/8 --dpor

Re: Iptables help ..

2004-08-31 Thread Eric Gaumer
On Tue, 2004-08-31 at 10:21, [EMAIL PROTECTED] wrote: > Hi, > > I am using the following iptables rules for the NAT, but i also want to > block outgoing port 25 traffic from the LAN clients. INAT works fine but > the outgoing port 25 is still open > > /sbin/iptables -F -t nat > /sbin/iptables -

Iptables help ..

2004-08-31 Thread debi
Hi, I am using the following iptables rules for the NAT, but i also want to block outgoing port 25 traffic from the LAN clients. INAT works fine but the outgoing port 25 is still open /sbin/iptables -F -t nat /sbin/iptables -A INPUT -p tcp -i eth0 -s 0/0 -d ! 10.0.0.0/8 --dport 25 -j REJECT

Re: Iptables Help

2003-02-13 Thread Nathan E Norman
On Fri, Feb 14, 2003 at 03:38:39AM +, Colin Watson wrote: > On Thu, Feb 13, 2003 at 11:34:39PM +, Pigeon wrote: > > It would be very useful to have some script that would ask you what > > services you intended to run, and generated scripts for iptables etc. > > that ensured that only the mi

Re: Iptables Help

2003-02-13 Thread Colin Watson
On Thu, Feb 13, 2003 at 11:34:39PM +, Pigeon wrote: > It would be very useful to have some script that would ask you what > services you intended to run, and generated scripts for iptables etc. > that ensured that only the minimum necessary services were available. Don't we have this kind of t

Re: Iptables Help

2003-02-13 Thread Pigeon
On Thu, Feb 13, 2003 at 02:17:59PM -0500, jereme wrote: > Let me reidirate, this is a _very_bad_ way to conscruct a firewall. A > better arpproach would be to tell us what services you do want to > provide, and to whom, the number of interfaces and their connections, > etc. > > Then you set the d

Re: Iptables Help

2003-02-13 Thread Vineet Kumar
* GBV ([EMAIL PROTECTED]) [030213 10:08]: > I have an webserver on port 3321 > how I can use iptables to deny(drop) all packages coming from internet?? iptables -P INPUT DROP will drop all incoming packets period. > > my inet interface is eth0 iptables -A INPUT -j DROP -i eth0 will drop all p

Re: Iptables Help

2003-02-13 Thread jereme
"GBV" <[EMAIL PROTECTED]> writes: > I have an webserver on port 3321 > > how I can use iptables to deny(drop) all packages coming from internet?? [...] > Deny any request coming from eth0, destinated to this host on port > 3321 I had a bit of trouble interpretting what you really wanted answer

Iptables Help

2003-02-13 Thread GBV
I have an webserver on port 3321 how I can use iptables to deny(drop) all packages coming from internet??   my inet interface is eth0   something like   Deny any request coming from eth0, destinated to this host on port 3321   thks..

[[IPTABLES HELP (fwd)]] (fwd)

2001-08-02 Thread dude
-- Forwarded message -- Date: Sat, 14 Jul 2001 17:30:26 -0400 From: Wayne Topa <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: [[IPTABLES HELP (fwd)]] OK, 1 more time. If you don't get this, go to the archives. - Forwarded message from Wayne Topa <[E

Re: IPTABLES HELP

2001-07-13 Thread Wayne Topa
Subject: IPTABLES HELP Date: Fri, Jul 13, 2001 at 11:05:33AM -0400 In reply to:dude Quoting dude([EMAIL PROTECTED]): > > If this is the wrong list, please tell > me where i should post this. > debian-firewall -- Enter any 11-digit prime number to continue... ___

IPTABLES HELP

2001-07-13 Thread dude
If this is the wrong list, please tell me where i should post this. Here is my iptables setup. As you can see I want a very secure firewall (and gateway) but i do want to have the ability to ssh from the outside and i am still not sure how to go about it. Anyway, here is my setup and i would a

Re: iptables help

2001-06-24 Thread Tom Tsaknakis
a billion thanks you sure you dont want that kid? hehe thanks again ill try that adios tom Quoting \"Jonathan D. Proulx\" <[EMAIL PROTECTED]>: > On Mon, Jun 25, 2001 at 01:04:30PM +1000, Tom Tsaknakis wrote: > :i will give anyone my first born if you can help me with converting this > :\\\'/sbin/

Re: iptables help

2001-06-24 Thread Jonathan D. Proulx
On Mon, Jun 25, 2001 at 01:04:30PM +1000, Tom Tsaknakis wrote: :i will give anyone my first born if you can help me with converting this :\'/sbin/ipchains -A input -s 10.96.8.1 -p IGMP -j ACCEPT\' I have all the kids I need :) But I have this working: iptables -A INPUT --proto icmp -s 10.9.1.1/32

iptables help

2001-06-24 Thread Tom Tsaknakis
i will give anyone my first born if you can help me with converting this \'/sbin/ipchains -A input -s 10.96.8.1 -p IGMP -j ACCEPT\' to an iptables line thanx in advance Tom - This mail sent through IMP on IGN WebMail. http://webmail.ign.com.au

Re: iptables help?

2001-04-06 Thread Brian May
> "Brian" == Brian May <[EMAIL PROTECTED]> writes: Brian> I am confused... Sorry about my noise. I found it was due to two reasons: 1. IN/OUT rules are used unless the packet is delivered to the local computer (ie not used if the packet is being forwarded). This seems to be a difference

iptables help?

2001-04-06 Thread Brian May
Hello, I thought that these iptables rules: snoopy:~# iptables -v -L ppp0-out Chain ppp0-out (1 references) pkts bytes target prot opt in out source destination 0 0 LOGall -- anyany 192.168.0.0/16 anywhere LOG level w