LinuxQuestions.org
Did you know LQ has a Linux Hardware Compatibility List?
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices



Reply
 
Search this Thread
Old 12-18-2005, 10:15 AM   #1
metallica1973
Senior Member
 
Registered: Feb 2003
Location: Washington D.C
Posts: 2,118

Rep: Reputation: 58
how to tell what ports are being blocked?


I am having trouble recieving phone calls comming into my firewall into a DMZ. How can I tell from looking at my logs or using a utility what ports are being blocked from incomming calls? If I reboot the VOIP modem and the firewall wall script, I can recieve only one phone call and then if some calls after the first call then it is blocked! help?

Last edited by metallica1973; 12-18-2005 at 10:17 AM.
 
Old 12-18-2005, 11:18 AM   #2
Matir
Moderator
 
Registered: Nov 2004
Location: San Jose, CA
Distribution: Ubuntu
Posts: 8,507

Rep: Reputation: 118Reputation: 118
What kind of VOIP system are you using? What is your firewall script?
 
Old 12-18-2005, 08:19 PM   #3
metallica1973
Senior Member
 
Registered: Feb 2003
Location: Washington D.C
Posts: 2,118

Original Poster
Rep: Reputation: 58
Matir, the man, I am using lingo (voip provider) on a mediatrix 2102 VOIP modem using SIP. I have also compiled SIP support in my kernel(from netfilter.com) It works but I can t recieve incomming calls! here are my rules:

#IP's for DMZ to VOIP
DMZ_NETWORK="192.168.2.0"
DMZ_IFACE="eth1"
DMZ_IP="192.168.2.1"
DMZ_VOIP_PHONE="192.168.2.120"

##Public services running ON FIREWALL-BOX (comment out to activate):

#- From DMZ Interface to DMZ firewall IP

$IPTABLES -A INPUT -i $DMZ_IFACE -d $DMZ_IP -p ALL -j ACCEPT

#$IPTABLES -A INPUT -i $DMZ_IFACE -d $DMZ_IP -p udp --dport 13456 -j #ACCEPT

#$IPTABLES -A INPUT -i $DMZ_IFACE -d $DMZ_IP -p udp --dport #10000:20000 -j ACCEPT

### Forward Section ########

#$IPTABLES -A FORWARD -o $EXTIF -p udp --dport 1024:1030 -j ACCEPT
#$IPTABLES -A FORWARD -o $EXTIF -p udp --dport 5050:5060 -j ACCEPT
#$IPTABLES -A FORWARD -o $EXTIF -p udp --dport 10000:20000 -j ACCEPT
$IPTABLES -A FORWARD -i $EXTIF -o $DMZ_IFACE -m state --state ESTABLISHED,RELATED -j ACCEPT
$IPTABLES -A FORWARD -i $INTIF -o $DMZ_IFACE -j ACCEPT
$IPTABLES -A FORWARD -i $DMZ_IFACE -o $INTIF -m state --state ESTABLISHED,RELATED -j ACCEPT

#DMZ_VOIP_PHONE -Forwarding

$IPTABLES -I FORWARD -i $EXTIF -p udp -o DMZ_IFACE -d $DMZ_VOIP_PHONE --dport 5060 -j ACCEPT
$IPTABLES -I FORWARD -i $EXTIF -p udp -o DMZ_IFACE -d $DMZ_VOIP_PHONE --dport 13456 -j ACCEPT
# $IPTABLES -I FORWARD -i $EXTIF -p udp -o DMZ_IFACE -d $DMZ_VOIP_PHONE --dport 10000:20000 -j ACCEPT

## PREROUTING ## ###### Enable IP Destination NAT for DMZ zone #######

$IPTABLES -t nat -A PREROUTING -p udp -i $EXTIF -d $DMZ_IP --dport 5060 -j DNAT --to-destination $DMZ_VOIP_PHONE

$IPTABLES -t nat -A PREROUTING -p udp -i $EXTIF -d $DMZ_IP --dport 13456 -j DNAT --to-destination $DMZ_VOIP_PHONE

#$IPTABLES -t nat -A PREROUTING -p udp -i $EXTIF -d $DMZ_IP --dport 10000:20000 -j DNAT --to-destination $DMZ_VOIP_PHONE

## POSTROUTING ####DMZ VOIP PHONE #######

$IPTABLES -t nat -A POSTROUTING -o $EXTIF -j SNAT --to-source 192.168.2.120

Last edited by metallica1973; 12-19-2005 at 12:34 AM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
FC4 Ports Blocked dokkah Fedora 2 11-18-2005 06:38 AM
Ports Blocked spaceballs Slackware 4 05-02-2005 10:42 PM
I'm pulling my hair out. All ports but 80 blocked. t3kn0lu5t Linux - Networking 9 10-02-2003 01:41 PM
getting by blocked ports niehls Linux - Networking 1 07-06-2003 04:00 PM
PORTS 80 and 8080 BLOCKED! vbp6us Linux - General 8 10-12-2002 11:56 PM


All times are GMT -5. The time now is 10:58 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration