Unknown firewall that I need to disable

R00ts · 07-03-2004, 03:33 PM

For the past couple of days I've been unable to connect to any P2P networks and I just discovered from Gnutella that it thinks I'm under a firewall. I contacted my ISP Earthlink and they said that it is not a hardware firewall. I never remember installing a firewall myself, so I have no idea what to look for. I'm running Debian sarge by the way. Anyways the following is my process list. If anyone could use this to figure out which firewall I have that is active and hopefully help me disable it, I would be ever grateful to you

Code:

tyler@localhost:~/dev/allacrost$ ps axu
USER       PID %CPU %MEM   VSZ  RSS TTY      STAT START   TIME COMMAND
root         1  0.0  0.0  1492  504 ?        S    03:57   0:02 init [2]
root         2  0.0  0.0     0    0 ?        S    03:57   0:00 [keventd]
root         3  0.0  0.0     0    0 ?        SN   03:57   0:00 [ksoftirqd_CPU0]
root         4  0.0  0.0     0    0 ?        S    03:57   0:00 [kswapd]
root         5  0.0  0.0     0    0 ?        S    03:57   0:00 [bdflush]
root         6  0.0  0.0     0    0 ?        S    03:57   0:00 [kupdated]
root       103  0.0  0.0     0    0 ?        S    03:57   0:00 [kjournald]
root       313  0.0  0.0     0    0 ?        S    03:58   0:00 [khubd]
root       623  0.0  0.1  1660  664 ?        Ss   03:58   0:00 dhclient -e -pf /var/run/dhclient.eth0.pid -lf /var/daemon     631  0.0  0.0  1608  444 ?        Ss   03:58   0:00 /sbin/portmap
root       730  0.0  0.1  1540  612 ?        Ss   03:58   0:00 /sbin/syslogd
root       733  0.0  0.2  2144 1212 ?        Ss   03:58   0:00 /sbin/klogd
Debian-    767  0.0  0.2  4164 1460 ?        Ss   03:58   0:00 /usr/sbin/exim4 -bd -q30m
tyler      772  0.0  0.3  3104 1644 ?        Ss   03:58   0:00 /usr/sbin/famd -T 0
wnn        776  0.0  0.7  5244 3952 ?        S    03:58   0:00 /usr/bin/Wnn4/jserver
root       781  0.0  0.1  1520  520 ?        Ss   03:58   0:00 /usr/sbin/inetd
root       791  0.0  0.6  4980 3596 ?        Ss   03:58   0:00 /usr/bin/X11/xfs -daemon
root       860  0.0  0.2  2696 1440 ?        S    03:58   0:00 /bin/bash /etc/rc2.d/S20xprint posix_sh_forced startroot       862  0.0  0.2  2696 1440 ?        S    03:58   0:00 /bin/bash /etc/rc2.d/S20xprint posix_sh_forced startroot       863  0.0  0.2  2696 1444 ?        S    03:58   0:00 /bin/bash /etc/rc2.d/S20xprint posix_sh_forced startroot       867  0.0  0.5  9072 2828 ?        S    03:58   0:00 /usr/bin/Xprt -ac -pn -nolisten tcp -audit 4 -fp /usdaemon     871  0.0  0.1  1672  624 ?        Ss   03:58   0:00 /usr/sbin/atd
root       874  0.0  0.1  1748  712 ?        Ss   03:58   0:00 /usr/sbin/cron
root       988  0.0  0.4  8780 2276 ?        Ss   03:58   0:00 /usr/bin/gdm
root       996  0.0  0.0  1484  472 tty1     Ss+  03:58   0:00 /sbin/getty 38400 tty1
root       997  0.0  0.0  1484  472 tty2     Ss+  03:58   0:00 /sbin/getty 38400 tty2
root       998  0.0  0.0  1484  472 tty3     Ss+  03:58   0:00 /sbin/getty 38400 tty3
root       999  0.0  0.0  1484  472 tty4     Ss+  03:58   0:00 /sbin/getty 38400 tty4
root      1000  0.0  0.0  1484  472 tty5     Ss+  03:58   0:00 /sbin/getty 38400 tty5
root      1001  0.0  0.0  1484  472 tty6     Ss+  03:58   0:00 /sbin/getty 38400 tty6
root      1002  0.0  0.5  9128 2696 ?        S    03:58   0:00 /usr/bin/gdm
root      1003  3.8  8.7 179880 45188 ?      S<   03:58   6:01 /usr/X11R6/bin/X :0 -audit 0 -auth /var/lib/gdm/:0.Xroot      1005  0.0  0.0     0    0 ?        S<   03:58   0:00 [kapmd]
tyler     1014  0.0  1.7 16848 9244 ?        Ss   03:58   0:00 /usr/bin/gnome-session
tyler     1079  0.0  1.4  8884 7432 ?        S    03:58   0:01 /usr/lib/gconf2/gconfd-2 5
tyler     1083  0.0  0.1  2236 1020 ?        S    03:58   0:00 /usr/bin/gnome-keyring-daemon
tyler     1085  0.0  0.5  5424 2992 ?        Ss   03:58   0:00 /usr/lib/bonobo-activation/bonobo-activation-server
tyler     1087  0.0  0.5  7952 2692 ?        Ss   03:58   0:00 gnome-smproxy --sm-config-prefix /.gnome-smproxy-1YQtyler     1089  0.0  1.4 16468 7356 ?        S    03:58   0:00 gnome-settings-daemon --oaf-activate-iid=OAFIID:GNOMtyler     1098  0.0  0.3  3772 1912 ?        S    03:58   0:00 xscreensaver -nosplash
tyler     1109  0.1  1.8 14688 9396 ?        Ss   03:58   0:10 metacity --sm-save-file 1088214290-1130-1105391248.mtyler     1124  0.0  3.3 27480 17344 ?       Ss   03:58   0:00 nautilus --sm-config-prefix /nautilus-x75JGB/ --sm-ctyler     1126  0.0  2.5 20472 12988 ?       Ss   03:58   0:02 gnome-panel --sm-config-prefix /gnome-panel-RuIYfv/
tyler     1128  0.0  1.5 15036 8084 ?        Ss   03:58   0:00 /usr/lib/gnome-panel/clock-applet
tyler     1130  6.7  7.0 49900 36432 ?       Rs   03:58  10:23 /usr/bin/python /usr/bin/gdesklets --sm-config-prefityler     1132  0.0  2.6 30696 13788 ?       Ss   03:58   0:03 gnome-terminal --sm-config-prefix /gnome-terminal-5Ptyler     1133  0.0  3.3 27480 17344 ?       S    03:58   0:00 nautilus --sm-config-prefix /nautilus-x75JGB/ --sm-ctyler     1134  0.0  3.3 27480 17344 ?       S    03:58   0:00 nautilus --sm-config-prefix /nautilus-x75JGB/ --sm-ctyler     1136  0.0  0.6  9388 3544 ?        S    03:58   0:00 /usr/lib/gnome-vfs2/gnome-vfs-daemon --oaf-activate-tyler     1137  0.0  0.6  9388 3544 ?        S    03:58   0:00 /usr/lib/gnome-vfs2/gnome-vfs-daemon --oaf-activate-tyler     1138  0.0  0.6  9388 3544 ?        S    03:58   0:00 /usr/lib/gnome-vfs2/gnome-vfs-daemon --oaf-activate-tyler     1151  0.0  3.3 27480 17344 ?       S    03:58   0:00 nautilus --sm-config-prefix /nautilus-x75JGB/ --sm-ctyler     1153  0.0  0.1  2168  740 ?        S    03:58   0:00 /usr/lib/nautilus-cd-burner/mapping-daemon
tyler     1154  0.0  3.3 27480 17344 ?       S    03:58   0:00 nautilus --sm-config-prefix /nautilus-x75JGB/ --sm-ctyler     1155  0.0  3.3 27480 17344 ?       S    03:58   0:00 nautilus --sm-config-prefix /nautilus-x75JGB/ --sm-ctyler     1158  0.0  0.1  2192  668 ?        S    03:59   0:00 gnome-pty-helper
tyler     1159  0.0  0.2  2596 1480 pts/0    Ss   03:59   0:00 bash
tyler     1160  0.0  2.6 30696 13788 ?       S    03:59   0:00 gnome-terminal --sm-config-prefix /gnome-terminal-5Ptyler     1161  0.0  2.6 30696 13788 ?       S    03:59   0:00 gnome-terminal --sm-config-prefix /gnome-terminal-5Ptyler     1165  0.0  2.0 17492 10628 ?       S    03:59   0:05 /usr/lib/gnome-panel/wnck-applet --oaf-activate-iid=tyler     1167  0.0  1.4 15868 7416 ?        S    03:59   0:00 /usr/lib/gnome-panel/mixer_applet2 --oaf-activate-iityler     1168  0.0  7.0 49900 36432 ?       S    03:59   0:00 /usr/bin/python /usr/bin/gdesklets --sm-config-prefityler     1169  0.0  7.0 49900 36432 ?       S    03:59   0:00 /usr/bin/python /usr/bin/gdesklets --sm-config-prefityler     1171  0.0  7.0 49900 36432 ?       S    03:59   0:00 /usr/bin/python /usr/bin/gdesklets --sm-config-prefityler     1176  1.8 10.7 70208 55332 ?       S    03:59   2:52 /usr/lib/mozilla-firefox/firefox-bin -contentLocale
tyler     1214  0.0 10.7 70208 55332 ?       S    03:59   0:00 /usr/lib/mozilla-firefox/firefox-bin -contentLocale
tyler     1215  0.0 10.7 70208 55332 ?       S    03:59   0:01 /usr/lib/mozilla-firefox/firefox-bin -contentLocale
tyler     1246  0.0 10.7 70208 55332 ?       S    03:59   0:01 /usr/lib/mozilla-firefox/firefox-bin -contentLocale
tyler     2580  0.0  0.1  2480  848 pts/0    R+   06:33   0:00 ps axu

david_ross · 07-03-2004, 03:42 PM

What does the output of:
iptables -nL

Show you?

R00ts · 07-03-2004, 04:28 PM

I'm assuming I should run it as root because running it as user gives "bash: command not found"

Code:

localhost:/home/tyler/dev/allacrost/src# iptables -nL
Chain INPUT (policy ACCEPT)
target     prot opt source               destination

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

And of course, I have no idea what that means

david_ross · 07-03-2004, 05:30 PM

It means that your firewall policies are set to accept connections - so that isn't your problem.

What happens when you traceroute to the machine you are trying to connect to? Does it complete?

R00ts · 07-03-2004, 05:44 PM

Quote:

Originally posted by david_ross
It means that your firewall policies are set to accept connections - so that isn't your problem.

What happens when you traceroute to the machine you are trying to connect to? Does it complete?

Yeah I thought it was odd that a firewall would be there in the first place. No, no connections every complete in Gnutella. I also tired GLMonkey, but that shows no signs of activity either. I downloaded gIFT and Apollon as well, but whenever I start Apollon it cranks on its command line a little and everything looks fine, then when the GUI loads it immediately exits.

(That seems to happen to me a lot with various Linux programs

). Would there be some kind of hostname or other setting I need to change in the P2P apps? Bit torrent works fine by the way and shows no sign of a firewall, making the situation even more

Thanks for your help though David. I'm happy to find that I don't have a firewall active

david_ross · 07-04-2004, 07:41 AM

If the GUI immediately terminates then try running the application from a terminal - it may spit out some useful error messages.