How do I know if a firewall is in place?

karlovac · 05-01-2004, 01:16 AM

I'm having trouble with a server that I've just set up: I can't FTP to it (although SSH and HTTP are OK).

How can I tell for sure if there is a firewall installed that's blocking FTP access or not?

It's running Fedora Core.

Thanks,

Antun

Etruscan · 05-01-2004, 01:36 AM

/sbin/iptables --list

karlovac · 05-01-2004, 12:19 PM

Thanks! I get:

Quote:

Chain INPUT (policy ACCEPT)
target prot opt source destination
RH-Firewall-1-INPUT all -- anywhere anywhere

Chain FORWARD (policy ACCEPT)
target prot opt source destination
RH-Firewall-1-INPUT all -- anywhere anywhere

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

Chain RH-Firewall-1-INPUT (2 references)
target prot opt source destination
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
ACCEPT icmp -- anywhere anywhere icmp any
ACCEPT ipv6-crypt-- anywhere anywhere
ACCEPT ipv6-auth-- anywhere anywhere
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:http
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:ftp
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:ssh
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:smtp
REJECT all -- anywhere anywhere reject-with icmp-host-prohibited

Is the line in bold the one that looks relevant? If so, it looks like the firewall is disabled for FTP, so I'd have to look elsewhere.

-Antun