LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Mandriva (https://www.linuxquestions.org/questions/mandriva-30/)
-   -   No Shorewall/IPtables: not inbound connections allowed (https://www.linuxquestions.org/questions/mandriva-30/no-shorewall-iptables-not-inbound-connections-allowed-326746/)

psychobyte 05-24-2005 06:28 PM

No Shorewall/IPtables: not inbound connections allowed
 
Hi,

I installed Mandriva LE 2005 on a PII 450 box. It seems to work fine but, I can't ping or ssh into the box. I can ping, ssh, ftp out of the box but, nothing is allowed in. I thought it might be shorewall so I uninstalled that. I also cleared the iptables. Still nothing.

Can anyone else think of anything that would block icmp/tcp traiffic other than iptables(shorewall)?

BTW the security level was set to Higher.


Thanks,

godzero 05-24-2005 06:49 PM

Clearing out ip table's rules has the effect of blocking all. Even from 127.0.0.1 iirc.
You can temporarily shutoff iptables (whitch will allow all) so you can re-set it up.

tkedwards 05-25-2005 01:24 AM

1. Reinstall shorewall be enabling the firewall in the Mandrake control centre thingy
2. Are you trying to ssh into your box from the internet or from the local network?
3. Depending on your answer pick one or both of the lines below and add them to the file /etc/shorewall/rules then restart shorewall (System->Services in the Control Centre)

Code:

#allow ssh & ping from the Internet - don't use unless you need it as it would expose you if a security hole is discovered in openssh
AllowSSH net    fw
AllowPing net    fw

Code:

#allow ssh & ping from local network
AllowSSH loc    fw
AllowPing loc    fw


tkedwards 05-25-2005 01:29 AM

Some more general firewall info for ya':

shorewall has probably the about best documentation of any open source project out there:
http://www.shorewall.net/
I'd encourage you to use it because its literally about 10 times easier and simpler and less error prone than using iptables to do your firewalling.

However if you want a GUI firewall config tool then uninstall shorewall and urpmi either firestarter or guarddog.


All times are GMT -5. The time now is 01:06 AM.