LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Blogs > kingbeowulf
User Name
Password

Notices


Rate this Entry

Accessing linuxgalaxy.org from the outside world

Posted 12-16-2017 at 02:09 PM by kingbeowulf

After some maintenance on the antique hardware and a new hard drive, I decide to upgrade to slackware-14.2. All seemed ok until I noticed (months later) that www.linuxgalaxy.org web site was no longer accessible from the outside world, as was murmur ans ssh. All worked well from inside my network. Therefore, it's not a web/murmur/ssh server configuration. The firewall script is passing though the correct ports - even turned it off for a bit and no change. Thus, its either:
  1. OpenWRT port forwarding - which hasn't changed in years
  2. afraid.freedns.org dynamic DNS configuration
  3. Comcast causing trouble
  4. new Netgear cable modem to replace the rented Arris from Comcast.
On my afraid.freedns.org account the Comcast IP is getting updated. I have tigervnc installed on another computer on the same network and remote access which works fine.

At this point, I'm a bit stumped as to what changed, or what I overlooked, when I upgraded Slackware.
Posted in Uncategorized
Views 531 Comments 1
« Prev     Main     Next »
Total Comments 1

Comments

  1. Old Comment
    I was going around in circles in assuming ther 14.1 == 14.2 in terms of kernel netfilter configuration. After poking around the 4 corners of the internet, and some help from IRC ##slackware user dive, I found the culprit. I did set up everything correcty when upgrading to 14.2 EXCEPT one iptables rule for "New not Syn" that had changed, or had been edited sometime in the distant past.
    Old Rule, works in 14.1 (?) not 14.2:
    Code:
    iptables -A bad_tcp_packets -p tcp --syn -m state --state NEW -j DROP
    New Rule, works in 14.2:
    Code:
    iptables -A bad_tcp_packets -p tcp -m conntrack --ctstate NEW -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -j DROP
    Had I used http://www.slackware.com/~alien/efg/ to generate and customize, this rule would have been correct.
    Posted 12-31-2017 at 03:02 AM by kingbeowulf kingbeowulf is offline
 

  



All times are GMT -5. The time now is 10:19 PM.

Main Menu
Advertisement
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration