LinuxQuestions.org
Help answer threads with 0 replies.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 08-21-2002, 08:22 AM   #1
i.d.
LQ Newbie
 
Registered: Aug 2002
Location: Sheffield
Distribution: RedHat 7.3
Posts: 4

Rep: Reputation: 0
Question ipchains


I am trying to run X-programs from a remote server on to my RH7.3 via an ADSL usb modem connecting with pppd.
I have this up and working except for the X-programs. I suspected this problem was with my fire wall so I swtiched it off with

/etc/init.d/ipchains stop
/etc/init.d/iptables stop

Now everything works, but I think this isn't very secure.

If I do #>ipchains -L I get

target prot opt source destination ports
ACCEPT udp ------ anywhere anywhere bootps:bootpc -> bootps:bootpc
ACCEPT udp ------ anywhere anywhere bootps:bootpc -> bootps:bootpc
ACCEPT all ------ anywhere anywhere n/a
ACCEPT all ------ anywhere anywhere n/a
REJECT tcp -y---- anywhere anywhere any -> 0:1023
REJECT tcp -y---- anywhere anywhere any -> nfs
REJECT udp ------ anywhere anywhere any -> 0:1023
REJECT udp ------ anywhere anywhere any -> nfs
REJECT tcp -y---- anywhere anywhere any -> x11:6009
REJECT tcp -y---- anywhere anywhere any -> xfs
Chain forward (policy ACCEPT):
Chain output (policy ACCEPT):

How do I go about allowing the X-programs to run without switching off my ipchains totally.

I only need to connect to one known remote server.

Thanks

I.D.
 
Old 08-21-2002, 09:27 AM   #2
pk21
Member
 
Registered: Jun 2002
Location: Netherlands - Amsterdam
Distribution: RedHat 9
Posts: 549

Rep: Reputation: 30
I think you can better use iptables.
 
Old 08-21-2002, 09:30 AM   #3
pk21
Member
 
Registered: Jun 2002
Location: Netherlands - Amsterdam
Distribution: RedHat 9
Posts: 549

Rep: Reputation: 30
You first have to find out on which ports X works. I know there are a lot of ports you need to open.
 
Old 08-21-2002, 01:32 PM   #4
klickibunti
LQ Newbie
 
Registered: Aug 2002
Distribution: Red Hat Psyche
Posts: 18

Rep: Reputation: 0
this is an example:
tcp 6000 3338 0 1962 1 X (output of socklist, a perl script)
 
Old 08-21-2002, 02:10 PM   #5
neo77777
LQ Addict
 
Registered: Dec 2001
Location: Brooklyn, NY
Distribution: *NIX
Posts: 3,704

Rep: Reputation: 56
xhost+ mastbe turned on on the remote machine to accept X requests from a local machine.
Sorry, all the way around - xhost+ on local to run apps from a remote.

Last edited by neo77777; 08-21-2002 at 02:11 PM.
 
Old 08-21-2002, 02:12 PM   #6
i.d.
LQ Newbie
 
Registered: Aug 2002
Location: Sheffield
Distribution: RedHat 7.3
Posts: 4

Original Poster
Rep: Reputation: 0
I have now managed to solve my problem, although I'm not sure if it was the best way?
I simply added the line

-A input -p tcp -s x.x.x.x -d 0/0 6000:6009 -y -j ACCEPT

To the file

/etc/sysconfig/ipchains


then applied with
/sbin/service ipchains restart


Thanks
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Ipchains brokenflea Linux - Networking 1 02-03-2004 05:44 AM
IpChains R4z0r Linux - Networking 3 03-01-2002 10:28 AM
ipchains help ... please> paulw Linux - Security 3 11-16-2001 10:15 AM
IpChains again ETT Linux - Security 3 07-24-2001 07:49 AM
[ipchains] MrGreg Linux - General 4 07-14-2001 11:35 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 11:15 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration