Iptables, "Operation timed out" and other questions

Ellops · 02-21-2006, 04:19 PM

Well, I admit I'm a newbie in linux security (though I'm paranoid

) so show a little patience..

The problem began when I set my apache to make a simple page+phpbb forum....
I sent my ip to a friend to check it out, but he couldn't connect :

Code:

Network Error (tcp_error)

A communication error occurred: "Operation timed out"
The Web Server may be down, too busy, or experiencing other problems preventing it from responding to requests. You may wish to try again at a later time.

I set the apache to listen on a port I've opened in the router NAT firewall, so I went to a port scanning page to find out that all my ports are closed, when I ran nmap from my pc, however, thats what I got:

Code:

(The 1663 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
21/tcp   open     ftp
23/tcp   open     telnet
80/tcp   open     http
1723/tcp open     pptp
3128/tcp filtered squid-http

Why this happens,??? I mean nmap show them open...

Anyway, I think that the problem is on iptables, no?

Could you tell me in brief how can I open port 7155? ( and how to close it after, ofcourse) cuz all tutorials I ve read need too much time, for what I want to do...

Or do you think that something else is the problem ?

Thanks in advance

exvor · 02-21-2006, 04:44 PM

is this computer connected directly to the internet?

if not you need to set your router to forward port 80 requests to your locacal machine with the http server

other then that its possible that your isp blocks port 80 requests. Most do nowdays because they wanna screw you
for more money on a busness account.

if you have cox i can say they do. And no they wont open it for you unless you pay more.

Capt_Caveman · 02-21-2006, 08:09 PM

If you are scanning the router from the LAN side, then you are likely seeing all the ports open to the LAN, not the public WAN side. Most SOHO routers have ftp and http ports open on the LAN side only, which would agree with your nmap scan results. I would think that the WAN side is probably still closed like the port scanning webpage reported. Take a look at your router manual and verify that all setting are correct for opening ports.