iptables behind a router

matador · 08-24-2004, 04:28 AM

I'm having a (what I believe) network problem wich I don't seem to be able to solve, so if there's anybody who likes to solve or sourting out the problem, I'd glad.

I have DHCP (adsl) internet access which works fine (program keeps me logged on automaticly) via a dlink 604 router. Firefox and so on works fine, the problem shows when I start nessus (after nessusd -D) when I log in I get 'could not open a connection to localhost'. I'm using the dhcp script of oscar andreasson with:

Code:

$IPTABLES -A tcp_packets -p TCP -s 0/0 --dport 1241 -j allowed
$IPTABLES -A udp_packets -p UDP -s 0/0 --source-port 1241 -j ACCEPT

also in the dlink 604 router I have created a virtual server on the same port to 192.168.0.xxx.

The same thing goes for dcgui-qt (direct connect clone). I can't connect to hubs in active mode. I've done the same thing as above with the following added in the iptables script described by axljab

Code:

iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
iptables -t nat -A PREROUTING -j DNAT -p tcp -i eth0 --dport 9176 --to-destination 192.168.0.xxx:9176
iptables -t nat -A PREROUTING -j DNAT -p udp -i eth0 --dport 9176 --to-destination 192.168.0.xxx:9176

I didn't think these were related untill I added trigger 1241 + 9176. Both suddenly worked, for about 2 hours... After it stopped working I added 1241 + 9176 to inbound ports, no change...

Now I don't understand why they're not working. I tried to turn of the iptables script, no change and put the puter on dmz, no change. If I plug out the router and stick the cable into the eth0 the network won't start. It could be many things and I'm returning to the same problems now so I an outside point of view...

matador · 08-25-2004, 10:09 AM

It works now. What I've done is again to turn off the iptables script, the router, the computer and the adsl modem. Somehow it works now but not before... It must have been the restart with the iptables script off and not loading or the long cooling of for the router...

I got this router not too long ago so I guess it's my iptables script that needs adjustment for beeing after a nat router (di 604) with a dhcp connection. Could someone please spell this out to me (sorry I'm a bit dyslectic - not a good combo with the rtfm...) how does a firewall script change behind a router. The router only forwards three ports inbound. Do I even need a firewall? I know a lot of people debate this one and I prefer safer.

I'd be very thankfull for an explanation