LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Mandriva
User Name
Password
Mandriva This Forum is for the discussion of Mandriva (Mandrake) Linux.

Notices



Reply
 
Search this Thread
Old 05-24-2005, 07:28 PM   #1
psychobyte
Member
 
Registered: Sep 2003
Location: Central Coast, California
Posts: 179

Rep: Reputation: 30
No Shorewall/IPtables: not inbound connections allowed


Hi,

I installed Mandriva LE 2005 on a PII 450 box. It seems to work fine but, I can't ping or ssh into the box. I can ping, ssh, ftp out of the box but, nothing is allowed in. I thought it might be shorewall so I uninstalled that. I also cleared the iptables. Still nothing.

Can anyone else think of anything that would block icmp/tcp traiffic other than iptables(shorewall)?

BTW the security level was set to Higher.


Thanks,
 
Old 05-24-2005, 07:49 PM   #2
godzero
Member
 
Registered: May 2005
Distribution: Mandriva 2005LE
Posts: 78

Rep: Reputation: 15
Clearing out ip table's rules has the effect of blocking all. Even from 127.0.0.1 iirc.
You can temporarily shutoff iptables (whitch will allow all) so you can re-set it up.
 
Old 05-25-2005, 02:24 AM   #3
tkedwards
Senior Member
 
Registered: Aug 2004
Location: Munich, Germany
Distribution: Opensuse 11.2
Posts: 1,549

Rep: Reputation: 51
1. Reinstall shorewall be enabling the firewall in the Mandrake control centre thingy
2. Are you trying to ssh into your box from the internet or from the local network?
3. Depending on your answer pick one or both of the lines below and add them to the file /etc/shorewall/rules then restart shorewall (System->Services in the Control Centre)

Code:
#allow ssh & ping from the Internet - don't use unless you need it as it would expose you if a security hole is discovered in openssh
AllowSSH net     fw 
AllowPing net    fw
Code:
#allow ssh & ping from local network
AllowSSH loc     fw 
AllowPing loc     fw
 
Old 05-25-2005, 02:29 AM   #4
tkedwards
Senior Member
 
Registered: Aug 2004
Location: Munich, Germany
Distribution: Opensuse 11.2
Posts: 1,549

Rep: Reputation: 51
Some more general firewall info for ya':

shorewall has probably the about best documentation of any open source project out there:
http://www.shorewall.net/
I'd encourage you to use it because its literally about 10 times easier and simpler and less error prone than using iptables to do your firewalling.

However if you want a GUI firewall config tool then uninstall shorewall and urpmi either firestarter or guarddog.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
iptables : how do I block inbound traffic from one ip address only? Apollo77 Linux - Security 7 03-22-2004 11:22 AM
Suse 9.0 still refusing connections after shorewall clear and iptables -F driftindutchman Linux - Security 1 02-23-2004 12:56 AM
Suse 9.0 still refusing connections after shorewall clear and iptables -F driftindutchman Linux - Networking 0 02-22-2004 11:27 PM
shorewall dropping/rejecting wanted connections (squid/webmin) win32sux Linux - Networking 2 08-01-2003 03:57 PM
iptables & inbound ftp, ssh bddwyer Linux - Networking 3 02-06-2003 10:27 AM


All times are GMT -5. The time now is 08:10 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration